Author Archives: Sarang Warudkar

Before you act on any security recommendation, you need to understand whether the advisor giving it has a commercial stake in your decision. Here is how to find out.

Most security briefings tell boards what happened. Boards need to understand what is at risk, what it costs to reduce it, and what decision is being asked of them.

The problem is not what assessors find. It is what they agree not to look at before they begin. Scope decisions made in the first meeting determine everything that follows.