My customer has a lot of defenses in place to mitigate risk. Why is the BRP still high?
The BRP is not influenced by any risk mitigation techniques in use. It should be considered a measure of the risk the organization would have without protections in place. This should be used to identify key areas where your data may be at greater risk based on the type of business that is conducted.
