Security standards, in all their various shapes and forms, are often viewed as a deep well of compliance nit-noid details associated with ever-rising demands on resources and periodic compliance and audit agonies. But let’s step beyond the agony to recognize and make effective use of security standards as the rich source of security knowledge they represent.
