Information risk is the potential for damage to sensitive info - the crown jewels (or assets). Think of risk as a combination of asset, threat source and vulnerability.
Technical people tend to downplay assets, probably because they don't know them too well. Business people know, infra folks don't. And yet, too many biz people expect tech colleagues to take the lead in managing Info Risk. The term "IT Security" only adds to the confusion about who should be on top of the matter.
It's all about the assets.
(some of) my events
- 2020-04-20 Immersiva medier (attending conference, Stockholm)
- 2020-03-18 Certifierad IT-arkitekt (guest lecturing, Stockholm)
- 2020-03-10--12 Northern European Conference on Emergency and Disaster Studies (presenting at conference, Östersund)
- 2020-02-05--08 Folk och kultur (attending convention, Eskilstuna)
- 2019-12-12 Datakommunikation och IT-säkerhet (guest lecturing, Högskolan i Gävle)
2016-07-26
Subscribe to:
Posts (Atom)
last chance...
