Identifying, Analyzing, and Prioritizing BC Requirements

Remember that it is not possible to plug every hole in a dam. Cybersecurity is an economic problem. Economics is the study of the allocation of scarce resources to satisfy unlimited demand. This applies to cybersecurity because the mitigation of risk requires resources. Resources typically refer to labor, capital, or time. Unlimited demand in this analogy is a risk, especially because you can never mitigate risk 100%. Even if you could, no organization has the resources to attempt to achieve 100% risk mitigation.

This section discusses contingency planning to protect an organization’s ability to achieve its objectives. Coincidentally, this is the primary responsibility of all cybersecurity practitioners to their organization. In order to fulfill this responsibility, the cybersecurity practitioner must first understand how their organization creates value for its stakeholders. Cybersecurity practitioners cannot protect...