Risk based security is incredibly popular in data security nowadays. However, this is not the just way. I listened to the episode 191 of the Risky Business Podcast. In that episode, Patrick Gray interviews Brian Snow, former NSA director. He provides some experience-based thoughts on probabilistic risk assesment (PRA) and proposes alternative approaches in Infosec:
About PRA:
- Useful in scenarios with benign players (e.
About PRA:
- Useful in scenarios with benign players (e.
