I am giving a talk at September's Information Systems Security Association (ISSA) meeting. The topic is practical risk management, how and why to build a security program around risk management. I hope to see you there.