QOTD Security Folks vs Risk Folks

A security person would say we would protect the data at all costs. A risk-oriented person would say let's try to quantify the business impact of this data and then protect the data that is absolutely critical to our operations. -- Rob Whiteley, Vice President and Research Director at Forrester Research Inc.
This article is a worthwhile read as it addresses things that IT and Security staff can/should and can't/shouldn't try to control.

Src: Data has become too distributed to secure, Forrester says | SearchSecurity.com

No comments: