Managing Risk and Information Security: Protect to Enable

by Malcolm Harkins

Without a governance structure that facilitates this dialogue, organizations may take too rigid an approach when applying controls to manage and mitigate risks.