A KISS Approach to Enterprise Security Risk Management

Enterprise security risk management (ESRM) has been a topic of increasing interest for security managers over the past few years.  ASIS International has identified it as a strategic focus. However, after a review of the literature, beginning with the 2010 CSO roundtable paper on ESRM, two issues are raised that could make ESRM implementation difficult. … Continue reading A KISS Approach to Enterprise Security Risk Management