Even having no context for this:

For some reason, I saw this video and immediately wondered if it wasn’t the result of the owner of these dogs decided he’d come home for the last @#$@#$ time to discover that the %#@#$ dog was out of the @#$!!@# cage, he set up the #@%@#$ video camera to find out who the #$@#$@$ keeps letting the dogs out.

Now let’s think about this from a risk perspective.

First, the dogs’ owner probably assumed that the threat was an outsider (another person) letting the dogs out. After all, they’re locked in a cage.

Second, I’d also bet that the owner either was unaware of the vulnerability or had accepted the risk (what’s the likelihood, right?).

Third, no amount of risk management will change the fact that the dog was probably digging up the neighbor’s flower beds or chasing cars down the street when he got home. Even when you believe risk is managed, you still need an incident response plan.

I coundn’t help but laugh about this fantastic metaphor for risk management. What a great way to make this issue that sometimes seems so abstract and complex into a easy to understand concept. I was just wondering if I could use it in our IT GRC blog as well (http://itgrc.wordpress.com).