Before you act on any security recommendation, you need to understand whether the advisor giving it has a commercial stake in your decision. Here is how to find out.
Category Archives: Perspectives
What your board actually needs from a security briefing
Most security briefings tell boards what happened. Boards need to understand what is at risk, what it costs to reduce it, and what decision is being asked of them.
Why most security assessments fail before they start
The problem is not what assessors find. It is what they agree not to look at before they begin. Scope decisions made in the first meeting determine everything that follows.