Aligning an information risk management approach to BS 7799-3:2005
This paper discusses the need and importance of information risk management in terms of business and organizational priorities. In the most basic sense, risk management is understanding and protecting those assets identified as most important to the business. Based on this, the reduction and...