CHAPTER 4: MANAGING THE RISKS

Conducting a risk assessment is a critical part of identifying what cyber security measures you need to implement and to what degree. This also helps keep your defences effective and affordable. Before delving into the different steps involved in risk assessment and management, however, we need to make one thing clear: security requires trade-offs.

Making trade-offs

Making trade-offs is a simple reality of achieving security, both in terms of the individual measures chosen as well as the overall level of security implemented.

Looking at the overall level of security first, if you chose to implement none at all, that might be cheaper and more convenient in the short term. The trade-off, however, is the certainty of ...

Get Cyber resilience - Defence-in-depth principles now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.