Risk Is Fat. Fat is Risk.

Risk never disappears.
Just like fat never disappears.

It only becomes acceptable.

You can reduce it.
You can control it.
You can bring it down to an acceptable level with security controls.
But there is always residue. It’s the remaining risk.

The residual risk in business after adopting new technology.

The residue of fat after the festival season or the weekend 😉

How do we deal with residual risk?
1. Implementing a specific mitigation plan
2. Incorporate compensating controls
3. Consider other risk options such as transfer, avoidance
4. Or just accept the risk, depending on the cost-benefit analysis

You do it the same way you reduce fat.
1. You pick healthier options.
2. You cut out what harms you.
3. You add habits that support you.

Healthy food is strong security.
Unhealthy food is weak security.
Your choices shape your personal & business outcome.

Join CISSP As An Art Tribe for more content like this.