Security is not about technology, or people, or processes – it is about risk. Each firm needs to make a unique, informed business decision on risk. The decision will drive investment in remediation efforts, whether it be people, process or technology. Read More