Managing Risk and Information Security: Protect to Enable

by Malcolm Harkins

the new security model requires that we balance preventative controls with detective (monitoring) and corrective controls, for several reasons.