Architecting Information Security - a Conceptual Overview

Martin Loeffler, Director of Information Security at the University of Toronto, discusses what Information Security means in the context of Risk Management, and answers the questions: "How much security do you need?", "How can you prove it?", and "How will you know when you have it?"