Cyber resilience - Defence-in-depth principles

CHAPTER 4: MANAGING THE RISKS

Conducting a risk assessment is a critical part of identifying what cyber security measures you need to implement and to what degree. This also helps keep your defences effective and affordable. Before delving into the different steps involved in risk assessment and management, however, we need to make one thing clear: security requires trade-offs.

Making trade-offs

Making trade-offs is a simple reality of achieving security, both in terms of the individual measures chosen as well as the overall level of security implemented.

Looking at the overall level of security first, if you chose to implement none at all, that might be cheaper and more convenient in the short term. The trade-off, however, is the certainty of ...