Risk management is a difficult process sometimes, as many ARC delegates will testify. The main problems are being able to accurately consider the probability of a threat becoming a reality and to make an accurate assessment of what specific threats may arise. In reality, what most security and risk managers tend to do is look to the past and base their risk assessments on previous experiences or incidents. This is probably not the best way to do things. This short article from ‘Continuity Central’ http://www.continuitycentral.com/feature0582.htmdiscusses the tendency to ‘fight the last war’.
Unfortunately – it doesn’t provide a solution to the problem!!
