Bruce Schneier's New Book
tgw writes: "Bruce Schneier talks about his new book 'Secrets and Lies: Digital Security in a Networked World' in the "latest Crypto-Gram newsletter." Applied Cryptography was excellent. I'll have to check out this one.
Risk management seems to be popular with banks and other financial institutions. It has one glaring flaw, it does not take into account the costs of security failures to customers. That's why bank are often sloppy and lax about security procedures when the customer's money is at risk. It is cheaper for the bank to fix the results of security failures than it is to prevent them.
Burris
... is here. It includes the preface of the book.