Making Sense of the SANS "Top Cyber Security Risks" Report

[Howell, Paul]

At
http://newschoolsecurity.com/2009/09/making-sense-of-the-sans-top-cyber-
security-risks-report/

The SANS Top Cyber Security Risks report has received a lot of positive
publicity (19 online stories, at last count).  (TippingPoint and Qualys
were partners in the report.) But none of the reporters or bloggers
analyzed the report, the methods, or the data.  They just repeat the
main points from the report. 

I applaud the effort and goals of the study and it may have some useful
conclusions. We should have more of this type of study, especially at a
large scale.

Unfortunately, the report has some major problems, listed roughly in
order of severity:  (for details, read on...)



------------------------------------------------------------------------
To unsubscribe from netsec, send mail to majordomo@merit.edu
with a body consisting of the words "unsubscribe netsec" --
without the quotes. For more help, send a message to majordomo@merit.edu
with the word "help" as the body.
------------------------------------------------------------------------