© Raymond Pompon 2016

Raymond Pompon, IT Security Risk Control Management, 10.1007/978-1-4842-2140-2_7

7. Governance

Raymond Pompon

(1)Seattle, Washington, USA

Amateurs talk about tactics, but professionals study logistics.

—General Robert H. Barrow,

USMC (Commandant of the Marine Corps) noted in 1980

How do you win in a game where the landscape is constantly changing and your opponents look for new ways to trip you up? Like Fort Pulaski, the defenses of yesterday become useless against today’s threats. What good is planning if everything you’re using can be made obsolete overnight?

Let’s step back and talk about the concept of tactics versus strategy . Some people use the terms interchangeably, but there is a distinct difference. Strategy refers ...

Get IT Security Risk Control Management: An Audit Preparation Plan now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.