Security News > 2016 > August > Consider Fact Management Before Risk Management (SANS Reading Room)