So yesterday I attended a training session put on by Risk Management Insight (blog) and put a lot of pieces together. These guys simply just get it. I have worked on and off with them the past year-ish helping them develop their risk analysis software (yep... Enterprise RoR!) and learned a lot just hanging around. Yesterday put all the missing pieces together for me though, and I have to say it's well worth it to seek these guys out and get some of their risk-fu. Seriously, if you are doing anything in information security you need to at the very least read Jack Jones (of RMI) white paper and soak up a bit of what he's pouring out. Once you read it you will have a whole new light on the way things should be. So stop reading my blog and go read something useful!