Risk management expert witnesses may testify on value at risk, risk management plans, and the risk management process, among other topics. In the introduction to Effective Strategies for Risk Management, Verisign writes:
Information security now demands a significant level of attention from organizations, but the traditional approach of identifying risk in purely technical terms has proven insufficient. Today, organizations must consider the areas that truly affect information security and integrate those findings into an overall risk management program to ensure effective and appropriate technology spending.
Read more: verisign.com.