Security is a broad unified activity, making no meaningful distinction between the physical and logical domains. The CSO’s beat encompasses all categories of risk-from safeguarding executives in Bogota to headquarters buildings in New York to customer information in distributed databases. Risk management begins with an understanding of the business costs of unremediated vulnerability. Only when the costs are known can be weighed against the economic potential of various business opportunities. Then the appetite for risk, in various quarters of the enterprise, can be expressed with reasonable accuracy.”]
Source: https://www.csoonline.com/article/2113169/ignorance-is-dis.html