Managing Information Security Risks across the Enterprise
Audrey Dorofee · Kluwer Academic Publishers eBooks · 2005
There are many ways to approach information security. This chapter looks at information security from a risk management point of view by focusing on the evaluation of information security risks. The evaluation looks at information-related assets that are critical to the success and survivability of an enterprise. By looking at these critical assets, determining how they are at risk, and developing mitigation plans and protection strategies, the enterprise can take a strategic approach to securing vital information. Taking a broad look at all types of threats, enterprises can spend their limited resources wisely, without falling down the rat hole of a technology-centric solution.