At Metricon about a third of the speakers were on about risk management in one form or another, which is a big change from a few years ago. Here’s another datapoint towards the mainstreaming of risk management in IT security:

McAfee launched a new corporate strategy on Oct. 16 aimed at helping companies integrate IT defenses used to fight external attacks and manage internal compliance, announcing a $20 million buyout of data leak prevention software maker Onigma as part of the expanded effort.

McAfee Acquires Onigma, Launches Risk Management Strategy, By Matt Hines, eweek.com< October 16, 2006

Continue reading →