With a recent survey indicating that upwards of 90% of US firms have experienced a data security breach, rhetoric within the industry is changing to reflect the ‘inevitability’ of a data breach. As such, CIOs are increasingly taking a risk-based approach to protecting the information within the organization. But with new threats – and new risks – emerging on a daily basis, where do you start? For Donald Cox, Deputy Director of the US Government’s Recovery Accountability and Transparency Board, it’s all about knowing your business…