Two Publications Recommend Organization-Wide IT Security Risk Management
Thursday, January 6, 2011 - 10:30
in Mathematics & Economics
Two new draft publications from NIST provide the groundwork for a three-tiered risk-management approach that encompasses computer security risk planning from the highest levels of management to the systems level. The draft documents have been released for public comment.