Bon Appetit: Establishing an Effective Cyber Risk Appetite

Presenter: Matt Tolbert, Senior Risk Specialist, Cybersecurity & Operational Risk, Federal Reserve Bank of Cleveland

A defined cyber risk appetite is foundational to the success of any firm's information security program. Yet guidance on what makes a cyber risk appetite effective is arguably lacking, especially standards for establishing risk appetite compliance thresholds as well as KPIs, KRIs, and KCIs. This talk will share current and forthcoming guidance and practices for cyber risk appetite development.

https://www.rsaconference.com/usa/agenda/session/Bon%20Appetit%20Establishing%20an%20Effective%20Cyber%20Risk%20Appetite

amp bank cleveland compliance cyber cyber risk cybersecurity defined federal federal reserve guidance information information security matt operational program risk security security program standards