Information Risk Management, 2nd Edition

PREFACE

In the six years since I wrote the original Information Risk Management book, much has changed in terms of technology and the threats to information. Little, however, has changed in terms of vulnerabilities. Chief among these is that many organisations (and often the most senior executives within them) believe that information risk is purely a technology problem, and ignore the fact that processes, procedures and people are often not only at the root of information risk issues, but also one of the principal means of resolving or avoiding them.

Technology is frequently the tool we use to secure information as well as to generate and store it, and these activities are easily interchanged in people’s minds, resulting in confusion and ...