Determining the range of actions that an organization needs to take to reduce security risk to an adequate or acceptable level depends on what an organization needs to protect and what it needs to prevent. Consider the following questions from an enterprise perspective:
Advisor
Don’t have a login?
Make one! It’s free and gives you access to all Cutter research.