The State of Risk-Based Security Management is an in-depth study conducted by Ponemon Institute and sponsored by Tripwire. The study is designed to reveal how organizations are applying rigor­ous and systematic analytical techniques in order to quantify and evaluate the security risks that impact an organization’s information assets and IT infrastructure. The full report can be found here: http://www.tripwire.com/register/the-state-of-risk-based-security-2013-full-report/

1. The State of Risk-Based
Security Management
Katherine Brocklehurst
RIM Renaissance Oct 25, 2013

8. Art

25. The CISO needs what the CFO has….

36. SANS Controls
SANS 1: Asset Inventory
SANS 3: VA
Attack Surface
Index (Summary)
Aggregated/Weighted
SANS 4: CA
Operational Reports
Across Business Context
SANS 5: Malware