The Blog

News & Thoughts from the Axenic Team

A Tale Of Two Incidents

By Axenic Team, on 20 December, 2012

Unless you spent the latter half of this year in a cave, you will be aware that both ACC and the Ministry of Social Development suffered security and privacy incidents.

There is only one way to eliminate risk

By Jim, on 26 October, 2010

One common misconception of risk management that I have come up against time and time again is that by managing a risk it has been eliminated and can be closed and removed from the risk register. This is simply not the case as risks can evolve and change over time for any number of reasons.

Risk definitions

By Jim, on 26 October, 2010

One of the problems that security practitioners have when discussing risk is agreeing on the terminology. My work in recent years has focussed on using widely accepted standards to underpin security recommendations.