IT Security and Risk Management

For many organizations, IT is an enabling and supporting technology without which the enterprise would quickly fail. The security threats to IT are numerous and rise from a wide variety of causes ranging from software flaws that are beyond the direct control of the enterprise to risks that arise from failures to recognize the consequences of failures associated with natural or other disasters, to failures induced by poor operational practices, to outright criminal activities by both outsiders and insiders. In this talk, we will consider the interdependencies among these and other risk sources and look at both technical and operational risk mitigators.