I was happy to find Anton Chuvakin's post about the issues of doing security based on risk management a few days ago. As I said on my twitter, "discussions about decision making (risk based vs. others) is the only thing interesting for me today on the security field". Anton made a very good summary about why we should consider alternatives to risk management and
Risk-less security
Risk-less security
Risk-less security
I was happy to find Anton Chuvakin's post about the issues of doing security based on risk management a few days ago. As I said on my twitter, "discussions about decision making (risk based vs. others) is the only thing interesting for me today on the security field". Anton made a very good summary about why we should consider alternatives to risk management and