From the course: IT and Cybersecurity Risk Management Essential Training

Unlock the full course today

Join today to access over 24,000 courses taught by industry experts.

The minimum viable approach

The minimum viable approach

From the course: IT and Cybersecurity Risk Management Essential Training

Start my 1-month free trial Buy for my team

The minimum viable approach

“

- [Instructor] When you design mitigations, make sure that they are minimum viable. Remember, the idea of minimum viable is to move the needle with the least amount of effort possible. This includes the cost of projects to build the mitigations as well as the ongoing effort to operate them. When you do this well, you will earn the respect of your senior decision makers. The secret of the minimum viable approach is to provide just enough ability to reduce the IT risk while minimizing implementation and operations costs. Another way of saying this is, what's the least we can do and still hit our IT risk reduction goal? And this means avoiding implementing mitigations that are unreasonable for a company of your size. For example, as tempting as it may be, don't deploy large enterprise solutions when you're a middle market or a startup company. And no matter how big your company is, before you buy a best-in-class system to mitigate…

Contents