Not using "Risk Management" doesn't mean "no decision making"
blog.securitybalance.com
I found an old bookmark in my "to blog" folder related to a New School post from David Mortman, "Decision Making Not Analysis Paralysis". I am one of those with second thoughts about our risk management tools. If you're still confident that you can use risk assessments as base of security decisions, I suggest reading
Not using "Risk Management" doesn't mean "no decision making"
Not using "Risk Management"…
Not using "Risk Management" doesn't mean "no decision making"
I found an old bookmark in my "to blog" folder related to a New School post from David Mortman, "Decision Making Not Analysis Paralysis". I am one of those with second thoughts about our risk management tools. If you're still confident that you can use risk assessments as base of security decisions, I suggest reading