
Nemertes Research: Information Risk Management in the Enterprise (PDF, 114KB)
Enterprise IT is being pulled steadily towards a risk-based view of the world. Companies need to understand their tolerance for risk, and embrace technologies and practices that allow them to meet, but not exceed, that tolerance.
Nemertes Research: Not an End In Itself -- Information Protection and Return on Risk (PDF, 93KB)
Information protection, a core discipline of information stewardship, must balance risk mitigation with business utility. Balancing risk against return turns information security into a primary enabler of technology innovation.
