Risk management is still where the money is

In the area of digital commerce and the Internet, the article looks at security as a risk management proposition. The core theme of risk management is to forego perfection and instead make tradeoffs (potentially messy), in pursuit of goal states. Security is not an end but a means, not a product but a process. The question is only what tradeoffs to make.