https://community.isc2.org/t5/Industry-News/Don-t-protect-if-it-costs-too-much-business/m-p/21174#M2588 <P>In risk management, there is an axiom that says you don't implement a control if it costs too much.&nbsp; If the cost of the safeguard exceeds the cost of the asset, it isn't worth it.</P><P>&nbsp;</P><P>But sometimes that principle gets taken in really strange directions.</P><P>&nbsp;</P><P>China has been hacking US companies for years, costing billions in lost secrets and technology.&nbsp; And the US businesses have known about it for some time.&nbsp; But <A href="https://www.npr.org/2019/04/12/711779130/as-china-hacked-u-s-businesses-turned-a-blind-eye" target="_blank" rel="noopener">they aren't doing anything about it</A>.&nbsp; Because they are afraid of losing business opportunities in China ...</P> Sat, 13 Apr 2019 18:15:29 GMT rslade 2019-04-13T18:15:29Z https://community.isc2.org/t5/Industry-News/Don-t-protect-if-it-costs-too-much-business/m-p/21174#M2588 <P>In risk management, there is an axiom that says you don't implement a control if it costs too much.&nbsp; If the cost of the safeguard exceeds the cost of the asset, it isn't worth it.</P><P>&nbsp;</P><P>But sometimes that principle gets taken in really strange directions.</P><P>&nbsp;</P><P>China has been hacking US companies for years, costing billions in lost secrets and technology.&nbsp; And the US businesses have known about it for some time.&nbsp; But <A href="https://www.npr.org/2019/04/12/711779130/as-china-hacked-u-s-businesses-turned-a-blind-eye" target="_blank" rel="noopener">they aren't doing anything about it</A>.&nbsp; Because they are afraid of losing business opportunities in China ...</P> Sat, 13 Apr 2019 18:15:29 GMT https://community.isc2.org/t5/Industry-News/Don-t-protect-if-it-costs-too-much-business/m-p/21174#M2588 rslade 2019-04-13T18:15:29Z