#Risk Archives - Page 2 of 2 - The SABSA Institute

The Attributer’s Blog – Owned

One of the thorniest issues in information security is the matter of ownership. Who is the owner of the data/information? In SABSA this is especially important because the owner will be the person who makes policy about how that data/information should be protected, against which threats, and for exploiting which opportunities. An owner is a domain authority for all data/information […]

The Attributer’s Blog – Valuable

In this issue we shall look at a SABSA Business Attribute that is especially slippery in its character: the attribute ‘valuable’. Value is measureable, but how reliable are those measurements? That’s the slippery bit. The concept of ‘value’ is closely coupled with risk. The concept of ‘risk appetite’ is also involved. This is best explored through a series of case […]