For information security, as with other types of internal controls, these views and requirements generally flow directly from risk considerations, as illustrated in the management cycle depicted above.
These views and requirements bear some relationship to risk considerations.
It recounts the misdeeds of Phantomd, a teen-age cracker who infiltrated computers at nuclear-weapons labs, military bases, banks, dams, and major corporations before he was caught.