Paradigm is not the word you're looking for.

Then surely the solution is simple; in order to avoid the idiocy of the American legal system, move out of America. They'll be more than happy to sort their shit out when they're losing trillions of dollars in tax revenue.

Above poster is not only an Anonymous Coward...but is John Snow in disguise. See below link. http://www.itgovernance.co.uk/shop/p-607-information-security-risk-management-for-iso27001iso27002.aspx

Pretty much! I didn't feel like drawing out the whole chart, but props to the man who did.

In information security risk management, we are taught that there are levels of "acceptable" risk, and that this can be calculated by analysing the likelihood and magnitude of a risk. Assuming a simple "high, medium, low" categorisation, anything that is less than "medium/low" or "low/medium" can pretty much be written off in the majority of circumstances.