Security, risk analysis and governance: a practical approach

摘要

Managing the security of today's ICT systems is becoming a daunting job. A few years ago ICT security was mosdy a technical job: it meant configuring firewalls, applying patches, checking that the configurations of the applications were done according to security guidelines, being up to date on known vulnerabilities and so on. These are all technical tasks left to security technical experts.