After closing a semester of teaching web application security, I wanted to share my observations and concerns regarding the understanding of “risk” among the next generation of security professionals. Most of the 11 students in the class had technical backgrounds. Their focus on technical security controls became evident within the first two weeks. As the class progressed, I was able to persuade all but two of the students of the critical role the business driver play. These student held to their conviction that a secure infrastructure is all that is required.”]
Source: https://www.csoonline.com/article/2137059/-it-risk–does-not-exist-.html