...way. I would put that current controls, risk assessments and selective audits are not sufficient in a broken securitymodel, because they do not fix anything, only try to contain damages. Posted by Rob Lewis | February 17, 2009 4...
http://www.computerweekly.com/blogs/david_lacey/2009/02/back_to_basics.html