Paul, Thanks for your comments.
>Unless you can demonstrate concrete revenue generationg directly >attributable to security, I don't think you can overcome that perception >(and loss avoidance through trust building does not generate revenue.) I believe the purpose of the paper is to move away from the loss avoidance model and describe information security in fashion that demonstrates how security mechanisms have a direct role to play in the creation of assets and business relationships. Ken _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
