Nemertes Research: Information Risk Management in the Enterprise(PDF,114KB)
Enterprise IT is being pulled steadily towards a risk-based view of the world. Companies need to understand their tolerance for risk, and embrace technologies and practices that allow them to meet, but not exceed, that tolerance.