...effectively manage operational and IT risk. I was particularly interested in the announcement about a collaborative researchinitiative with academia, called Security Risk Management (SRM), to align security controls with critical business processes...
http://www.computerweekly.com/blogs/david_lacey/security-solutions/