Stuart King's Security and Risk Management Blog

Sometimes the simplest things can make a difference. I was speaking to a group of Dutch product managers a few days ago, walking through a risk assessment process. The most important parts of the process are marked in green, as they have been for the past five years or so. One of those present exclaimed "but we think that if it's in green then it's not so important. If it's important then I would expect it to be in red." The penny drops!