John Pironti, chief information risk strategist with Getronic, talks with Richard Swart about risk management. He says the most important thing is to start out by doing business process mapping. Technology tends to be a reactive measure, but once we have identified a potential threat, we can’t use technology to help identify it. Technology is something that is easily understood and can solve simpler problems that can’t be easily comprehended, he says. Technology is a great thing once we’ve identified the potential threat that we’re worried about, but you can’t start with technology.”]