Key Elements of an Information Risk Management Program: Transforming Information Security Into Information Risk Management

摘要

Information security and protection are critical to an organization, but cannot guarantee its success. To facilitate effective protection of information, a risk management approach that balances the need for information security against the needs of the organization enables the organization to be efficient and successful in its activities. Information has always had associated value, but only recently have capable and motivated adversaries truly understood and exploited this value.