2022 RSAC takeaways: Risk management vs compliance
-
Compliance is vital. But when it justifies the status quo, a compliance-only approach to cybersecurity can be counterproductive. However, the adoption of a risk management approach can be the most useful to enterprise cybersecurity teams.
https://www.securitymagazine.com/articles/97924-2022-rsac-takeaways-risk-management-vs-compliance