Managing Risk and Information Security: Protect to Enable

by Malcolm Harkins

enterprise IT, a typical “set and forget” error is the failure to keep controls up-to-date, particularly if the controls are designed to mitigate a relatively low risk.