Hitting the Trifecta in SRM

In horseracing, a “trifecta” is a bet that predicts the top three finishers in exact order. The odds given on such a bet are usually greater than 50:1, and can be much higher depending on the field. So hitting the trifecta is really tough. But when you hit it, you win big.
In Security Risk Management, the odds are even higher. Your company’s brand, stock price, shareholders, employee livelihoods and customers all depend upon your ability to effectively manage security risks. This does not mean you run around begging to double the security budget. It means that you establish the best possible order in an environment that is always changing. The only way to do that is to manage risk…risks of protection breakdowns, risks of non-compliance and risks of runaway spending. In today’s climate, hitting the trifecta in Security Risk Management requires that you improve protection (as threats increase), increase compliance (as regulations and their scope increase) and lower the total cost of operations (as budgets tighten).
This is old news. Why am I dragging you through this familiar but daunting perspective on reality? Because I believe it’s time to assemble for a journey that will tackle these challenges collectively and thus raise the entire industry’s chances of hitting the SRM trifecta. McAfee is prepared to lead this journey, but collaboration at a customer level, partner level (continue reading...)