# Act V — Staying in control



There are more things in information technology than were ever dreamt of in the philosophy you started your career with.

As technology has grown, so have the promises, the value, the number of actors involved, and the stakes.

In such circumstances, what chance do you stand to avert catastrophe?

That is the topic of the final act of this book, where we'll dive into the many levels of staying in control.


- [How My Site Got Hacked](https://digitalinfrastructures.nl/book/act5-risk/how-my-site-got-hacked/)

- [Introduction to Risk](https://digitalinfrastructures.nl/book/act5-risk/intro-to-risk/)

- [Who Suffers?](https://digitalinfrastructures.nl/book/act5-risk/who-suffers/)

- [Information Security Assets](https://digitalinfrastructures.nl/book/act5-risk/assets/) — Data, not hardware, is the real asset at risk — ENISA's cloud taxonomy, the threat/vulnerability chain, and why risk = impact x probability needs a real victim.

- [Lean Risk and Economics](https://digitalinfrastructures.nl/book/act5-risk/lean-risk/)

- [Data, Risk, or Controls: where to start?](https://digitalinfrastructures.nl/book/act5-risk/darico/)

- [Compliance is a Risk](https://digitalinfrastructures.nl/book/act5-risk/uneasy-compliance-risk/) — Target was PCI-DSS compliant and still lost 40 million card numbers — compliance forces risk management onto reluctant actors, but never guarantees security.

- [Automate or Die: A Capacity Planner's Rules](https://digitalinfrastructures.nl/book/act5-risk/automate-or-die-capacity-planning/)

- [Retrofitting Zero Trust on an existing application: an illustration](https://digitalinfrastructures.nl/book/act5-risk/retrofitting-zero-trust-existing-application/)

- [Why lawyers need to understand cloud](https://digitalinfrastructures.nl/book/act5-risk/lawyers-need-understand-tech/)

- [What about AI Risks?](https://digitalinfrastructures.nl/book/act5-risk/querying-ai-risk/)

- [New skills needed](https://digitalinfrastructures.nl/book/act5-risk/new-skills-needed/)

- [Digital autonomy: The risks](https://digitalinfrastructures.nl/book/act5-risk/digital-autonomy-the-risks/)

- [Digital autonomy: Autarky](https://digitalinfrastructures.nl/book/act5-risk/digital-autonomy-autarky/)

- [Digital autonomy: Controls](https://digitalinfrastructures.nl/book/act5-risk/digital-autonomy-controls/)

- [A guide to digital sovereignty, autonomy, and business resilience](https://digitalinfrastructures.nl/book/act5-risk/guide-autonomy-resilience/)