Six Considerations for Strengthening Information Security

Second, people often think of information security in absolute terms (e.g., “We must have this or that”). Information security is a risk-management problem, which is all about making sensible trade-offs. Security improvements require decisions involving money, time and efficiency, all of which must be evaluated against the risk it will reduce.