Continuous observation and experimentation to
identify the systemic opportunities and risks
• Security should not be added as an afterthought
• Balance between profitability and security; between
organizational control and individual freedom.
• Vigilance by the staff can recognize and deal with the
unusual risks
• The company detects, deters, corrects, prevents,
tolerates, mitigates dangers, and recovers from
damage.