Managing Risk in the Cyber World

Presented by

Steve Durbin, Managing Director, Information Security Forum (ISF)

About this talk

Organisations are constantly taking risks: it’s challenging for a company to maximise profit, or to deliver products or services, without them. But how is it possible to determine when it is a sound business decision to accept risk? Or better, determine which are the right risks to take to achieve the desired return? Risk appetite is fundamental to good risk management. The ISF defines risk appetite as “the nature and amount of risk an organisation is willing to accept to achieve its objectives”. Understanding this concept and how it can be applied can contribute to the quality of risk acceptance decisions. For example, knowing what risk the organisation has already accepted provides important context when deciding whether or not to accept additional risk. But how do you apply these principles to cybersecurity and most importantly how do you ensure consistent alignment between security, IT and the business around risk management? This webcast will suggest how to adopt a risk-based security model and highlight some of the ways to gain acceptance of this approach across the business.

Related topics:

More from this channel

Upcoming talks (1)
On-demand talks (140)
Subscribers (21694)
Steve Durbin, Chief Executive of the ISF and ISF analysts will present the ISF webinar series: "In pursuit of the secure organisation..." We will be sharing thought leadership and practical guidance drawn from ISF Members, which include many of the world’s leading Fortune and Forbes listed organisations) on how to address cyber, information security and risk management issues facing businesses and their security teams. 1. Emerging Cyber Threats (ISF Threat Horizon annual series) 2. The role of the CEO and business leaders in cyber security 3. Being a successful CISO 4. Cyber-attack trends 5. Critical Asset Management 6. Data breach prevention 7. Supply chain 8. Insider Threat and the role of the end user