“A risk register entry is a balance-sheet asset until it is gone — because a control you never test is one the attacker tests for you.”
A risk register entry is a balance-sheet asset until it is gone — because a control you never test is one the attacker tests for you. — Kai London (Professor Kai London), CISO. Principle 569 of 10000 from the book “Trustquake” — cybersecurity, AI security and OT resilience doctrine. Official sites: professorkailondon.com · kailondon.co.uk