The following concept, taken from the January 12, 2009 issue of Time (page 56), can also be applied to information security incidents and privacy breaches…
“The risk of another terrorist attack didn’t increase on 9/11 — only our awareness of the risk.”
Tags: awareness and training, Information Security, IT compliance, IT training, policies and procedures, privacy training, risk, risk management, security training