A threat-based approach to security. (February 2015)

• Record Type: Journal Article
• Authors: Semple, Will
• Is Part Of: Computer fraud & security. Number 2(2015)
• Page Start: 7
• Page End: 10
• Publication Date: 2015-02
• Subjects: Computer crimes -- Periodicals; Computers -- Access control -- Periodicals; 364.168
• DOI: 10.1016/S1361-3723(15)30007-5
• Languages: English
• ISSNs: 1361-3723

Abstract

Abstract : Traditionally, security practitioners are taught to evaluate security in terms of risk to their organisations, and security policies and practices are put in place purely to minimise these risks. Traditionally, security practitioners are taught to evaluate security in terms of risk to their organisations, and security policies and practices are put in place purely to minimise these risks. The problem with this approach is that, by focusing on the 'worst case scenarios', we forget about the actual threats that exist. Security professionals and organisations need to change the focus from a risk- to a threat-based approach in order to stand the best chance against cyber-criminals, explains Will Semple of Alert Logic.