As mentioned previously, I gave a presentation on IT Risk at the 2017 Security BSides Orlando Conference. The title was "Risk: It's more then just a game from Parker Brothers". Was trying to be a little cute and have a catchy title.
The talk was about IT Risk, and I was aiming it at infosec professionals. My idea is that risk is important to understand, as we do security to reduce risk to the organizations we work for. But I think too many infosec folks just don't have a good understanding of this.
Now, the talk was posted. Not sure how well it comes out. I'll update with a link.
But what I wanted to give here was information on the sources and materials I used for the talk.