Convergence: A holistic approach to risk management

✍ Scribed by Kent Anderson

• Publisher: Elsevier Science
• Year: 2007
• Tongue: English
• Weight: 254 KB
• Volume: 2007
• Category: Article
• ISSN: 1353-4858
• DOI: 10.1016/s1353-4858(07)70033-8

✦ Synopsis

Every year, IT security managers develop new budgets requesting more funds and resources to stem the tide of endless security issues. These include patching, virus management, provisioning, installation of new appliances, and many more. Every year, business leaders listen to these requests and usually provide a fraction of the desired increases. This cycle has become a ritual in the IT security profession and fits Albert Einstein's definition of insanity perfectly: doing the same thing over and over again, and expecting different results.

Convergence: A holistic approach to risk management

Kent Anderson, member of Certified Information Security Manager (CISM) board, Information Systems Audit and Control Association (ISACA).

Today's security practitioners feel more pressure and accountability to perform, yet never seem to have the resources to get the job done. Consequently, "executives just don't get it" is probably the most common explanation among frustrated professionals, but have we ever stopped to ask if maybe we're the ones who don't get it? CONVERGENCE