Risk Assessment
Laurent Stoffel · Computer Fraud & Security · 2002
Before selecting a solution for any sort of problem, first identify the problem to solve. It sounds obvious but the process of problem discovery — or, in the case of security, risk assessment — is even more critical. Yet it’s surprising how often this simple concept isn’t rigorously adhered to, especially when it comes to security. It all comes down to your view of the scale and importance of security in the first place.