Two key take - away 's from this approach : the cost of a security - breach is n't financial , it is reputational and can be fatal ; secondly it is not a question of ' how they have attacked me ' , but ' who has attacked me ' . Information Security teams need to focus on three issues : attribution , and risk profiling : " by categorising attackers – looking the " who " as well as the " how " - organisations can develop much better responses for future attacks . "
Two key take-away's from this article: the cost of a data-breach isn't financial, it is reputational and can be fatal; secondly it is not a matter of 'how they have attacked me', but 'who has attacked me'. Information Security teams need to focus on two issues: attribution, and attacker profiling: "by categorising attackers – looking the "who" as well as the "how" - organisations can develop much better responses for future attacks."