An Alternative to Risk Management for Information and Software Security
Software Engineering Institute (SEI) Podcast Series - A podcast by Members of Technical Staff at the Software Engineering Institute

Categories:
Standard, compliance, and process are more effective than risk management for ensuring an adequate level of information and software security. Related Course Assessing Information Security Risk Using the OCTAVE Approach Listen on Apple Podcasts.