Information security risk assessments and security mindset
One of the core activities of information security (infosec) governance is risk assessment. Unfortunately, it is often conducted as just another “compliance requirement” and is not expected to bring real value to organization. In ideal world we would have companies...