Solutions / Attacks and risk
Your risk register is a spreadsheet nobody opens
It was current the week before the last audit.
- Give every risk an owner and a decision
- Feed vulnerabilities into risks, and escalate a risk to an incident in one step
- Ask what changed this month and who owns it