Why a Risk-Based Approach to Cybersecurity Makes Sense

Too many companies look at incidents such as the one involving Colonial Pipeline and take a "sky-is-falling" approach, says Danielle Parks, who analyzes return on security investment at Nucleus Research. Parks lays out the questions enterprises should ask to assess their risks and how to proceed accordingly.