It's a tougher challenge than many security folks talk about.

Who should have the final say about whether to accept, mitigate, transfer, or avoid risk?

- Cybersecurity?
- Compliance?
- Legal?

The answer:

None of them.

Check out this episode of Deploy Securely to learn who should.

Or read the original blog post here: https://blog.stackaware.com/p/who-should-make-cyber-risk-management