I've just released a new white paper "Risk and Trust". I wanted to put in context the ongoing discussions about RBAC vs ABAC and authentication against the bigger picture of data clouds, push vs pull and programmable internet applications. All of which I propose requires an enterprise risk and trust assessment framework.The paper is available at http://www.authenticationworld.com/Risk%20and%20Trust.pdf.
Regards,
Guy

del.icio.us