Comments on: Stuart King – Risk Assessment Rebuttal

By: Stuart King – Information Security Annoyances – Response 2 « Risktical Ramblings

Sat, 21 Mar 2009 18:28:51 +0000

[...] November of 2008, I posted a rebuttal regarding Stuart’s dislike for my approach to risk assessments. I am still convinced that [...]

By: Phil Agcaoili

Phil Agcaoili — Sat, 07 Mar 2009 10:53:00 +0000

Boom and we have a Risk Assessment Chris. Very well put.

On a side note, after training in martial arts most of my life, I’ve come to realize when I picked up Brazilian Jiu-Jitsu that it doesn’t leave a mark. Good call on asking him to choke himself.

By: Nigel Mellish

Nigel Mellish — Mon, 17 Nov 2008 17:45:54 +0000

“I suppose that the “right” way is whatever way works best in your present circumstances: fact of the matter is that even given the best set of data, we usually get broadsided by something unexpected.”

If we’re “usually” getting broadsided – then how can it still be “unexpected”?

Also, if you’re now saying that Chris’ way could be “right” – then I think the right thing to do would be to update your blog post.

By: Stuart King

Stuart King — Mon, 17 Nov 2008 14:58:28 +0000

It’s all fair enough points Chris – even the choking part. It’s good to hear somebody passionate about getting the riskassessments right because I think it’s a critical thing that so many get wrong or ignore completely. I suppose that the “right” way is whatever way works best in your present circumstances: fact of the matter is that even given the best set of data, we usually get broadsided by something unexpected.