Risk appetite for information security

Best practice in risk management tells us that we need to understand our risk appetite and measure risk in relation to this. But how do we measure our appetite for information security risk?

Acuity has created a presentation describing requirements, concepts and approaches to setting risk appetite, with some practical examples.  Please click on the link below to download the presentation.