In this session, security experts and experienced practitioners will share their views on how to determine a baseline level of security that meets the company’s obligations and provides effective protection from attackers.
Security laws and frameworks require security teams to take a risk-based approach to defending against threats, often by determining the “reasonable” level of security relevant to the context in which they are operating and the systems they’re trying to protect.
Determining what is “reasonable” is no easy task, sometimes requiring input from several departments and careful resource allocation. But getting this right is a crucial element of demonstrating your company’s compliance.
In this session, security experts and experienced practitioners will share their views on how to determine a baseline level of security that meets the company’s obligations and provides effective protection from attackers.