Risk Management

Security Watercooler: Cyber Risk Universe, with CISO Mentor's Phil Huggins

This week we are trialling an idea around a virtual ‘Security Watercooler’. 25~30 min video calls to break up the day and showcase different viewpoints. Check out more about the concept here. Today Robin Oldham was joined by CISO Mentor’s Phil Huggins to discuss the cyber risk universe. Here are the summary notes from the call: Phil and Robin have been working on a project ‘Open Information Security Risk Universe’ that is available, in part and as a PDF, on GitHub here: https://github.

More Security Watercooler: Cyber Risk Universe, with CISO Mentor's Phil Huggins...

We need your help to develop a better way to measure and manage cyber risk

At Cydea we believe in risk management should be consistent in its approach, informed by the data you have, and automated where possible. It’s part of our belief in positive security. Annual risk assessment workshops and ‘five-by-five’ risk matrices are no longer good enough. They don’t invite unacceptably wide margin for error and do not keep pace with modern business. We think it is time to do something about that. And we would like your help!

More We need your help to develop a better way to measure and manage cyber risk...

What are you defending?

In our opinion, most cyber security consultants spent most of their time talking about how things go wrong. One of our mottos at Cydea is “Let’s make things go right.” One way of doing that - and an important principle that guides us - is by understanding as much as possible about how each organisation works. We don’t start by asking “Are you defending against all these possible attacks?”

More What are you defending?...