Recent Trends, Future Predictions, and Effective Risk Assessments
Risk assessments are a fundamental part of any organization’s risk management process. But many organizations still do not incorporate true risk assessments into their information-security planning, even though doing so makes good business sense and is required by many standards and regulatory frameworks (the HIPAA Security Rule, PCI-DSS, and the NY Department of Financial Services Cybersecurity Requirements all require risk assessments, to name just a few).
Source: Recent Trends, Future Predictions, and Effective Risk Assessments