Riding within the Risk Appetite: Being Reasonable in an Unreasonable World

No ratings

Presented at SecureWorldAtlanta 2019 by

Phillip Mahan

Security professionals have the ability every day to secure a business right out of business. Locking down controls so tightly that nothing can be done is just as bad for business as having no controls at all. The “Reasonable Person Test” is often used in legal matters, and should also be considered in security and data protection. In a corporation’s risk appetite there is a fine line between “risky” and “stupid,” and it is up to security professionals to make sure that there is a recovery plan for after “risky”‘ and that “stupid” is avoided.