Watch this video on YouTube
What is the most important aspect in effectively managing an organization's information security risk?