Tim Bass has posted an entry on the (ISC)²blog regarding what he and a few others feel are the top security threats for 2008.


You fine folks have anything to add?

Don,

overall I would agree with your analysis of #10 and it should definitely be addressed in a DR plan.

However it is human nature to be more helpful to return full service following a disaster and this can come in the form of reducing security checks to increase speed of operation. If your working environment requires stringent security controls you must ensure that they are enforced at all times to protect against an opportunist strike during a vulnerable moment.

In line with the DR theme, a client of mine recently finished an internal risk assessment. The results suggested that there is a 20% of a plane hitting my facility (despite us not being near an airport or under a flight path), think I need to claim danger money

I think honestly Don he wanted to make it an even 10 things.. like "Ten Commandments" and all that.  You know... just rolls off the tongue better than the "Eight top security threats" or... "Six" or whatnot.  Hense... a little fluff, and perhaps repeating of threat vectors is expected.