Today I’ll discuss risk probability and impact and give you some examples to build your own impact and probability table.ProbabilityImpactThanks.Dr. Bill SouzaCEO/FounderE|CE - Executive Cyber Educationhttps://www.execcybered.com 

Cybersecurity Risk

Tackling Risk Probability and Impact

Today I’ll touch on the topic of Cyber Risk & Cyber Investment challenges.ImprovingExploitsAttack pathsAttacker behaviorInvestmentThanks.Dr. Bill SouzaCEO/FounderE|CE - Executive Cyber Educationhttps://www.execcybered.com 

5 Cybersecurity Challenges

The show today is based on an article titled, “Global utilities lacking basic cybersecurity practices.” Although the article was focused on utilities, the guidance is applicable to every industry, so I will touch on a few recommendations that could be useful to you as well, regardless of industry.Links mentioned on the show:Article: Global utilities lacking basic cybersecurity practices says expert (powerengineeringint.com)Webinar: https://www.execcybered.com/nist-csf-replayThanks.Dr. Bill SouzaCEO/FounderE|CE - Executive Cyber Educationhttps://www.execcybered.com 

Lacking Basic Cybersecurity Practices

We are so focused on the threats and the vulnerabilities that allowed a hack to occur, that we forget the basics. The protection necessary to prevent or slow down these attacks already exists, and they exist for a long time.Thanks.Dr. Bill SouzaCEO/FounderE|CE - Executive Cyber Educationhttps://www.execcybered.com 

Cybersecurity Basics - What you Need to Know

In today&apos;s episode, I will discuss exceptions tracking and expirations. This is the last episode in a three-part series on cybersecurity standard exceptions.Thanks.Dr. Bill SouzaCEO/FounderE|CE - Executive Cyber Educationhttps://www.execcybered.com 

Cybersecurity Exceptions - Part 3 (FINAL)

As I mentioned in my previous episode, there’s much more to discuss on cybersecurity exceptions, such as the risk they pose to the organization and the hidden dangers of cumulative risk. Blog: https://www.execcybered.com/blog/cybersecurity-exceptions-part-2Thanks.Dr. Bill SouzaFounder & CEOE|CE - Executive Cyber Educationwww.execcybered.com

Cybersecurity Exceptions - Part 2

If your cybersecurity standards were written to protect the organization, why do you have security exceptions? Your standard development team writes an excellent standard; it follows all the best practices of the NIST Cybersecurity Framework, the ISO 27001, or any other industry-recognized standards and frameworks, but most of all, it is common sense, right? Anyone working on or with a cybersecurity team in a large organization knows this does not happen! Exceptions happen.Dr. Bill SouzaFounder & CEOE|CEwww.execcybered.com

Cybersecurity Exceptions - Part 1

Asset classification is the foundation of everything else to come in cybersecurity; it will help your organization, for example, small or large, to better understand, manage, identify, and classify your assets.Episode: Cybersecurity - Asset Classification (execcybered.com)Dr. Bill SouzaFounder & CEOExecutive Cyber Education

Cybersecurity - Asset Classification

In this episode, I will discuss three challenging areas where cybersecurity education is falling short in preparing students and professionals to succeed in the field.

Zero-Sum Game

In this episode, I discuss how to leverage your risk framework to make sound cybersecurity investment decisions. I addressed two critical questions that you will need to know the answers; first, how can you tell your program is doing the right thing? and second, How can you tell you are protecting the organization in a financially healthy way?Dr. B.Executive Cyber Educationwww.execcybered.comeBook: https://www.execcybered.com/risk-identification-ebook

Cybersecurity Investment & Risk Strategy

To get results you need to ask the right question, collect the data, analyze, and develop a robust and factual interpretation. This episode will guide you through the thought process and give you some ideas on how to develop a strong argument on where you should focus your cybersecurity investments and tools.Infographic: https://executive-cyber-education.mykajabi.com/identification-analysisDr. B.

Critical Systems: Asking the Right Questions

Today’s episode I will discuss a strategy to identify critical systems in your organization. The steps I will discuss today will make sure your program is objective and repeatable.The eBook mentioned in this podcast can be downloaded here:https://executive-cyber-education.mykajabi.com/risk-identification-ebookThanks.Dr. B.https://execcybered.com/podcast-1

Cyber Risk Identification

Today’s episode we will discuss how to identify KRIs (key risk indicators). I’ll discuss a simple and effective way to do it; there seems to be a lot of confusion on what to measure and for a long time, subject matter experts believe we can’t measure Cybersecurity.

Key Risk Indicators

Today’s episode, we will discuss “tail risk” and the impact it may have on organizations when it’s realized. Given our current environment, it seems entirely appropriate for us to have this meaningful discussion.

Tail Risks: What are you going to do differently?

Today’s episode we will discuss the popular risk formula, “Risk =  Threat x Vulnerability x Consequence/Impact and its limitations to actually provide accurate information for a cybersecurity investment or tactical decision. I will be leveraging the “Risk Analysis and Management for Critical Asset Protection (RAMCAP) framework that was also used by the Department of Homeland Security.

Risk Formula: What's wrong with it?

Cyber risk is a complex topic and part of a larger picture in your organization. Cyber risk is a strategic necessity for any organization to increase cyber resilience. In this podcast, we will have an open conversation on governance, risk, and compliance to move your organization from as-is to the next level. Here we will have discussions on program assessments, control assessments, risk identification, risk register, mitigation plans, and much more.

hubhopper

Cybersecurity Risk

hubhopper