The Information Value of Past Losses in Operational Risk
"... the information provided by past losses results from them capturing hard to quantify factors such as the quality of operational risk controls, the risk culture, and the risk appetite of the bank."
Security risk analysis techniques involve identifying security threats in software systems and planning countermeasures. Automation and knowledge reuse aid analysts, but they must interpret and assess
“... this article provides anchorage to scholarly audiences when scrutinizing the extent to which privacy and security measures qualify as ‘appropriate’ in the context of liability claims and actions