Reading my colleague’s Stuart King’s blog posting on the financial impact of security incidents reminded me of the continuing obsession that many parts of industry and academia still seem to have for achieving the Holy Grail of perfect ROI measurement. Many of them miss the point.
http://www.computerweekly.com/blogs/david_lacey/governance-issues/
...reports related to $7.1 billion in losses caused by a roguetrader at Société Générale, a large French bank...pages of instant message conversations revealed that the roguetrader may not have acted alone, and alleviated concerns that...
http://www.facetime.com/pr/pr080306a.aspx