Risk Management

Risk management: An inside view

CIA logo

This text is intended to be a caption for the above image.

In a practical as opposed to a theoretical sense, there are pros and cons to the current focus on risk management, said Robert Bigman, who retired as the CIA’s chief information security officer earlier this year and is now CEO of his own consulting firm, 2BSecure LLC.

“I think it has a lot of appeal in government for agencies getting a handle on what they have, though not necessarily where the risk is,” he said. “Most agency CIOs don’t know what they have and what’s connected to what, so in that sense the risk management process is good, not just from an asset management perspective but also for security.”

Main story: Cyber insecurity: Managing against the risks

However, there is no accepted common concept behind what risk management means in the IT environment, Bigman added. Management strategies are good when you have a finite set of variables and know what you are dealing with, but that’s not typical for IT security.

Furthermore, most agencies must take risks every day in order to do their jobs — risks that a risk management strategy will tell you not to take. In that case, he said, what is likely to take precedence?

“Because of the event-by-event, case-by-case state agencies are in, security is a day-by-day, tactical response program, and what we’re doing is running around putting out fires and trying to keep the mission going,” he said. “This notion that you can automate this and interactively understand your risk on a daily basis is a whim, a farce.”

About the Author

Brian Robinson is a freelance writer based in Portland, Ore.


  • Congress
    U.S. Capitol (Photo by M DOGAN / Shutterstock)

    Funding bill clears Congress, heads for president's desk

    The $1.3 trillion spending package passed the House of Representatives on March 22 and the Senate in the early hours of March 23. President Trump is expected to sign the bill, securing government funding for the remainder of fiscal year 2018.

  • 2018 Fed 100

    The 2018 Federal 100

    This year's Fed 100 winners show just how much committed and talented individuals can accomplish in federal IT. Read their profiles to learn more!

  • Census
    How tech can save money for 2020 census

    Trump campaign taps census question as a fund-raising tool

    A fundraising email for the Trump-Pence reelection campaign is trying to get supporters behind a controversial change to the census -- asking respondents whether or not they are U.S. citizens.

Stay Connected

FCW Update

Sign up for our newsletter.

I agree to this site's Privacy Policy.