Security Risk Management

Chapter 1

The Security Evolution

Information in this Chapter

• How We Got Here

• A Risk-Focused Future

• Information Security Fundamentals

• The Death of Information Security

Introduction

Before even starting to think about the various steps required to design a program to assess and evaluate information security risks, it is important to briefly review the history of the field and take a quick look at Information Security as a discipline. Even those of you who are already familiar with some advanced risk assessment techniques can benefit from reviewing how we got here or you risk repeating the same mistakes. Information Security (or Information Assurance) needs to be viewed through the lens of business context to see the added value of basing ...