PREFACE
The benefits which Internet technologies offer to business professionals also present considerable risks. The management of these risks is the focus of this book.
I have tried to distil the essential risk elements and reconstruct them into a framework that reduces complexity and creates a sense of order for their management. I have divided coverage of the subject into three sections:
• Part 1 introduces Internet risk and discusses various technology, legal and operational risks.
• Part 2 identifies some key principles for good governance, assessing risk, and risk management.
• Part 3 suggests technology, legal and operational solutions to the risks set out in Part 1 through risk management strategies identified in Part 2.
With respect to legal and compliance provisions, I have tried to ensure the law is accurate as at July 2010. Full texts of the legislation mentioned can be accessed at www.opsi.gov.uk/acts.
The book contains a caveat frequently issued by lawyers. Coverage of the various topics is, of necessity, generic in nature, as risks and solutions arise and apply respectively in different ways from organisation to organisation.
This book is a general guide to the origins of cyber risks and to developing suitable strategies for their management. It is no substitute for obtaining appropriate, timely and professional advice on specific cyber risk issues and their management which may arise in a specific organisation.