Steve Mathews

England

Management Consultant

I have always believed that whilst boards of management, whether commercial or governmental, have no pain to fear from the results of poor governance of personal data under their control, they will take no action. Profit or cost 'priorities' will always intervene. So the risk analysis parameters stemming from BS7799, to which I contributed, are inherently sensible, they need incentives to ensure management focus on prevention of loss at least as much as cost and profit.