Cyber Risk Management Starts with Risk Quantification - Padraic O'Reilly - BSW #332

Cyber has been an historically hermetic practice. A dark art. Full of mysteries and presided over by magicians both good and bad. This is a bit of an exaggeration, yet there is some truth to it. Many in our industry knew that the SEC was evaluating the role that cyber risk management and incident disclosure plays in the pricing mechanism for an equity. Many of the participants in GRC, IRM, and Cyber Risk anticipated this before the SEC had even …

art bad cyber cyber risk cyber risk management dark good industry management practice quantification risk risk management risk quantification sec truth