SEARCH RESULTS
 
Showing 1-10 of 861 records
 
Expand article

What is a Wise Risk Decision Worth? or ISO 27001 KPIs Follow Up

2008-12-03 15:47:11 by Alex in RiskAnalys.is
 
...risk - and similarly Shrdlu wrote I really have no idea. I personally wouldnt try to justify an ISO implementation by itself. If I could show traceability on how it affected our overall security risk, then thats what Id do And thats a delightful answer. That traceability (geeze-louise Shrdlu - what a word!) is absolutely what Im after here....
 
Tags: iso, iso google, iso adoption, iso implementation, iso folks, iso adoption helps, risk, google iso compliance, iso implementation differs
 
 
 
 
Expand article

What Are You Managing Towards? (And On Disproving Risk Management)

The Article has images
2008-06-03 14:41:11 by Alex in RiskAnalys.is
...Risk Management Process. Three quick things to anyone who has read it and is visiting our blog for the first time We dont believe that the goal of Quantitative Risk Analysis is to be precise. We believe the goal is to be accurate. Subtle but important difference FAIR can be used both Quantitatively and Qualitatively. The decision on which...
 
Tags: management, risk management, term risk management, management focuses, management approach, risk management process, patch management, cost management, upper management
 
 
 
 
Expand article

Wakeup Call for Risk Management

2008-09-19 10:11:09 by Burton Group in Security and Risk Management Strategies Blog
 
...risk management, its important to understand more about what happened, and then draw some parallels to our business risk management and IT risk management situations The risk management failure in the housing market and on Wall Street had multiple interdependent dimensions Mortgage lenders abandoned long standing prudent loan practices . They...
 
Tags: risk management, risk management debacle, risk management failure, failure, risk management realistic, business risk management, risk management models, risk, risk management situations
 
 
 
 
Expand article

Does Risk Management Make Sense?

2008-10-14 13:25:09 by schneier in Schneier on Security
 
...risk management all the time, but it only makes sense if we do it right Risk management" is just a fancy term for the cost-benefit tradeoff associated with any security decision. It's what we do when we react to fear, or try to make ourselves feel secure. It's the fight-or-flight reflex that evolved in primitive fish and remains in all...
 
Tags: risk management, risk management decisions, risk, avoid risk management, natural risk management, risk management consciously, security, security world, information security magazine
 
 
 
 
Expand article

Rational Risk Management, Angry Italians, and Irrational Security Analysts

2008-11-17 16:43:15 by Alex in RiskAnalys.is
 
...risk assessment. And he didnt want to wait for it To quote Chris Hayes, spending time on working out the expected effectiveness of controls, over a given timeframe, as measured against a baseline level of force was not going to pacify an angry Italian fearful that my decision was going to cost him money. He wanted my explanation of the risk...
 
Tags: risk, risk tolerance, risk models, practical risk analysis, strong risk anlayses, generous risk geeks, immature risk analysis, quote chris hayes, chris hayes
 
 
 
 
Expand article

One Mans Frustrations With Risk Management

2008-09-23 18:05:20 by Alex in RiskAnalys.is
 
...Risk Management And in short, its everything. It pretty much sums up why I had to grow to re-evaluate how our industry does risk, risk management, approaches controls & vulnerability and find a new way. A couple of things jump out at me in reading Chris article 1.) Just because that Deming cycle sucks and is full of unknowns doesnt mean risk...
 
Tags: risk management, risk management methodologies, risk management approaches, risk, risk management methodology, risk management models, risk professionals focus, risk analysis, specific
 
 
 
 
Expand article

Why Risk Management Doesnt Work (?!)

2008-10-08 17:15:14 by Alex in RiskAnalys.is
 
...Risk Management Doesnt Work which if you click on the link should come up for you after seeing someones advertisement for a few seconds Im assuming the author wants us to read the title as Things to Look Out For in Performing Risk Analysis and not Risk Management is Folly - Stop, Stop, Stop! The former is fine, the latter isnt supported by...
 
Tags: risk management, information, information risk management, risk, poor risk management, information security risk, reduce risk, risk analysis, cool report
 
 
 
 
Expand article

A Cryptographer and a Data Communications Guy Talk About Risk Management

2008-10-16 15:32:16 by Alex in RiskAnalys.is
 
...risk management Unfortunately, to get to the article, youll have to either already be a subscriber to IT Security, a subscriber to TechTarget, or go through the 20 minute process of signing up by giving TechTarget all sorts of market information about how youre really Brandon Walsh, CSO of The Peach Pit Industries in Beverly Hills, CA 90210...
 
Tags: risk management, management, risk, engineer risk management, methodologies, risk assessment methodologies, risk models, risk analysts, models
 
 
 
 
Expand article

Risk Preferences in Chimpanzees and Bonobos

2008-04-17 06:20:51 by schneier in Schneier on Security
 
...risk. People tend to be risk averse when it comes to gains, and risk seeking when it comes to losses: Evolutionarily, presumably it is a better survival strategy to -- all other things being equal, of course -- accept small gains rather than risking them for larger ones, and risk larger losses rather than accepting smaller losses. Lions chase...
 
Tags: risk preferences, risk, relative risk preferences, risk-prone behaviour, approach, people approach risk, people, losses, risk larger losses
 
 
 
 
Expand article

Risk Management and Analysis Standards Update

2008-06-17 16:51:27 by Alex in RiskAnalys.is
 
...Risk Management, and RMI has a new website CISCO WEBINAR UPDATE First, Jacks Webinar with Cisco is Thursday . If you were lucky enough to get a slot, be sure to catch it. If you didnt get a slot but would like to still go, let me know (info at riskmanagementinsightdotcom - subject Webinar RISK MANAGEMENT STANDARDS AND FAIR Second, The Open...