I came across an interesting
article on the BCS website which looks into our ability to reduce risk in any
particular situation. One interesting aspect that is discussed is that in most cases,
while reducing one type of risk, we are actually increasing another. One hypothesis
for example, is that introducing safety features in cars (seatbelts, airbags, ABS),
has actually resulting in people driving more aggressively and relying on technology
to keep them safe. The author, Luther Martin from Voltage
Security then applies this principle to IT projects. Interesting point, have
a read