The reviewed literature has shown the need to align activities, including risk management, with the strategy and objectives of the organisation.
It has gone in depth into risk and risk management. It has introduced the concept of holistic or enterprise risk management together with the motivating role of compliance, which is in opposition to current silo mentality in risk management.
Subsequently, it has identified the twofold role of information as risk connector of different risks and business process element and what organisations need to do to practise an effective information security, contrasting it with how it is currently done in organisations.
This review has also presented the pervasive nature of operational risks in organisations and finally, it has provided references on reasons to link these risk management practices and on how to do so and the benefits this tie provides to the organisation.
The final part of this review deals with an indispensable condition for this link to succeed and bring real benefits to the organisation: management commitment. This condition falls under management innovation.
Cyber Insurance Due Diligence
Cyber Insurance book by @itsecuriteer
Creating IT security teams
the book
Popular Posts
-
This post compiles my notes on three Papers on vulnerabilities in complex networks: - "Multiscale vulnerability of complex networks &q... -
This time the student notes I post are coming from the reading of a scientific paper written by Mark Newman , Professor of Physics in the Un... -
I am convinced that Information Security professionals can benefit from reading, not only Information Security books like this one or that ... -
In the introduction to the Data Science world, one needs to build the right frame surrounding the topic. This is usually done via a set of ... -
Belgium: Waffles... and security The professional activities that we undertake within our company, be it our own shop or our employer, can... -
An elegant way to sell security Every now and then we need to get a chance to slow down our professional tactical everyday pace and think ... -
In the introduction to the Data Science world, one needs to build the right frame surrounding the topic. This is usually done via a set of ... -
Social Psychology Professor Scott Plous mentioned a very enlightening almost 12-minute video on the " Science of Persuasion " by ... -
A valuable security research repository Every single week, somewhere in the world, a security conference or presentation takes place. Att... -
The book by James Surowiecki titled " The wisdom of crowds " fell into my hands and I read it during the summer of 2015. These ar...
Follow me on twitter!
