Where do information security and risk management begin?

Consider a start-up business being built in the garage of one or two bright individuals with a bright idea. The goal of the business is to maximize its profits. At first, the bright individuals are scratching for their daily wages, and the production of anything they can sell is paramount. This is a business in its infancy; it is generally not well managed but, rather, running recklessly at full throttle to accomplish some level of completion that can begin to generate revenue. “We need a paycheck!”

As these two scramble to develop some product, they have little concern for rules and regulations. Whatever it takes, whatever shortcuts are required, they do that to make the product functional ...

Get CISSP Training Kit now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.