Security News > 2016 > August > Realistic Risk Management Using the CIS 20 Security Controls (SANS Reading Room)