http://www.theemailadmin.com/2008/12/stop-the-devils-you-know-first-then-the-devils-you-dont-know/ Thu, 09 Feb 2012 11:07:36 +0000 hourly 1 http://wordpress.org/?v=3.2.1 http://www.theemailadmin.com/2008/12/stop-the-devils-you-know-first-then-the-devils-you-dont-know/comment-page-1/#comment-554 Mike Nelson Thu, 04 Dec 2008 18:19:16 +0000 http://www.theemailadmin.com/?p=191#comment-554 I don't disagree with the CAG objectives or approach, but I'm a bit concerned that we tend to focus on threats from outside. A strong perimeter is important, but I'd hate to focus on it to the extent that I miss exposures from within my own environment, exposures that could have availability or integrity impacts on data, not "just" confidentiality risks. Like everything in life, balance is critical. I don’t disagree with the CAG objectives or approach, but I’m a bit concerned that we tend to focus on threats from outside. A strong perimeter is important, but I’d hate to focus on it to the extent that I miss exposures from within my own environment, exposures that could have availability or integrity impacts on data, not “just” confidentiality risks. Like everything in life, balance is critical.

]]>