normanmarks.wordpress.com
NIST discovers that impact on the business matters
Congratulations to NIST for recognizing that what matters is not risk to information assets, but risk to enterprise objectives. Or so it might seem at first glance when you read their draft Using B…