Name: Why Your Risk Quantification Method Limits Your Board’s Understanding of Cyber
Start: 2021-11-10T18:00:00Z
End: 2021-11-10T18:00:37.000Z
Location: BrightTALK
Rating: 0

Webinars, panels, and commentary for cutting-edge CISOs, cybersecurity teams, IT compliance professionals, and risk management experts.

See how Rob Nolan, CISO at Expeditors, built the company's cyber risk management strategy in this session from STRONGER 2024. Rob discussed his challenges and successes while building a comprehensive cyber risk program. He dove into the critical role of quantifying risk and scenario planning, which paved the way for effective risk management and communication with his C-Suite and Board of Directors. Rob highlighted how Expeditors aligns cyber initiatives with business growth goals, and how he used cyber as a competitive advantage to grow the business. Learn from Rob's experience turning cybersecurity from a necessary safeguard into a strategic business enabler at a Fortune 300, with learnings that apply to companies of all stages.

STRONGER 2024: Building an Effective Cyber Risk Program to Drive Business Growth

This keynote panel from STRONGER 2024 delved into the essential components and best practices for building and maintaining a comprehensive cyber risk management program. It explored the critical elements of program development, including risk quantification, integrating automation, and ensuring program maturity. The panel featured insights from industry leaders and experts who have successfully implemented and evolved cyber risk management programs in their organizations. Gain practical advice and actionable strategies to effectively enhance your programs and address emerging threats.

STRONGER 2024: Blueprint for Success: Building a Robust Cyber Risk Management Program

From STRONGER 2024: Join Patrick Wright, Chief Information Security & Privacy Officer for the State of Nebraska, as he dove into the critical elements of designing an effective cyber risk management program at the state level. Patrick shared his journey from establishing a foundational security framework to achieving significant milestones in gaining stakeholder buy-in. 

Learn how he implemented strategies that transitioned Nebraska’s cybersecurity efforts from reactive to proactive, risk-based approaches. This discussion provided valuable insights into the practical challenges and key success factors in building a robust cyber risk management program tailored to the unique needs of state government.

STRONGER: Cyber Risk in the Heartland: Nebraska’s Path to Statewide Resilience

Join Padraic O'Reilly, Founder of CyberSaint, and Mike Donaldson, Senior Director of Cyber Risk Services at CyberSaint, as they explore key findings from the Gartner® Innovation Insight: Cyber GRC Streamlines Governance report.

With 85% of organizations struggling with fragmented GRC systems, Padraic will discuss why this is a persistent issue and how companies can consolidate efforts for a unified view of cyber risk. We’ll dive into the rising importance of cyber risk quantification, spurred by new regulations like the SEC rule, and how continuous control monitoring (CCM) is reshaping compliance strategies.

We’ll conclude by discussing how CyberSaint’s unique platform addresses GRC integration challenges, improves efficiency, and delivers measurable outcomes.

Dive In: Gartner® Innovation Insight: Cyber GRC Streamlines Governance

CyberSaint and IBM watsonx are thrilled to introduce the next phase of generative AI with KnightVision. This new capability is a cutting-edge AI tool within the CyberStrong platform that leverages IBM watsonx. KnightVision addresses the critical challenges CISOs face daily by enabling security leaders to contextualize the latest threat and vulnerability intelligence within their cyber risk management programs.

Join Padraic O’Reilly, Founder of CyberSaint, and Jeff Achtermann, Principal Technical Architect at IBM watsonx, for a deep dive into this exciting new capability, transforming AI into a reliable solution for CISOs and security leaders. See how KnightVision acts as a cyber risk command center and empowers CISOs to gain a holistic view of their cyber risk landscape, leveraging generative AI to identify and correlate risks and provide precise remediation guidance.

During this webinar, you will learn how this solution leverages the advanced AI capabilities of both CyberStrong and watsonx, several use-case benefits, and how it works. 

Discover how KnightVision can: 
- Identify Cyber Risk Patterns
- Analyze Data in Real Time 
- Identify Risk Gaps 
- Recommend Cost-Effective Remediation Plans

In this webinar, learn how KnightVision is a multi-purpose tool for CISOs and other C-level Executives to secure and justify security investment, enhance risk posture visibility, and automate continuous compliance. The speakers will also address key questions regarding customizability, mitigating the risk of hallucination, and data retention policies.

Triaging Cyber Risk Across the Enterprise with CyberSaint and IBM watsonx

Join us for a live demonstration of CyberSaint’s revolutionary top-down approach to cyber risk management. In an era where aligning cybersecurity strategy with business objectives is paramount, traditional methods of risk assessment and quantification fall short of easily delivering actionable financial insights that resonate with the C-suite. This demo will delve into how CyberSaint uniquely bridges the gap between cybersecurity and business by translating complex cyber risks into clear financial terms that CFOs and CEOs understand. Attendees will learn how to seamlessly benchmark their risks versus industry peers, measure residual risk, implement credible cyber risk quantification with models like FAIR and NIST 800-30, and quickly stand up a dynamic risk register to support informed decision-making across the enterprise.

Live Demo: Elevate Your Cyber Risk Program with Actionable Insights & Measurable Results

Live Demo: Quantify Your Cyber Risk Posture & Progress for C-Suite Alignment

Live Demo: Drive Quick Wins with Instant Industry Benchmarking & Cyber Risk Quantification

As AI transforms business and cyber processes across all industries, it is imperative to understand the intersection of the new NIST CSF “Govern” function and AI governance. This webinar will provide a comprehensive overview of how the principles of governance within the NIST CSF can be effectively aligned with AI governance practices to enhance organizational security and compliance.

We will begin by exploring the key components of the NIST CSF “Govern” function, focusing on developing and implementing governance policies, processes, and procedures. Following this, we will delve into the principles of AI governance, emphasizing ethical AI, risk management, and the need for fairness, accountability, and transparency in AI systems.

The core of the webinar will examine the intersection of the NIST CSF “Govern” function and AI governance, discussing how AI technologies can be seamlessly integrated into existing cybersecurity governance frameworks. We will address the unique challenges and opportunities that arise from this integration, providing insights into best practices and strategies for managing AI-related risks within the broader context of cybersecurity.

Transforming Cyber Risk Operations and Board Oversight with the Govern Function

Join us to discuss the latest Gartner® report, Hype Cycle™for Cyber-Risk Management. As new emerging tools enter the market, security leaders need trusted guidance on selecting agile solutions for cyber risk management. CyberSaint has been recognized for its advancements in Cyber Governance, Risk and Compliance (GRC), and Continuous Control Monitoring (CCM). As the breadth of security and risk controls grows, organizations must continuously monitor their risk and control management processes. 

Automation and continuous monitoring are vital to delivering real-time insights and can scale with the adoption of new technologies, compliance requirements, and the advent of new attack vectors.

Learn how CyberStrong supports risk management with automation, delivering actionable, data-backed insights to efficiently lead cyber risk management operations.




Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

Dive In: Gartner® Hype Cycle™ for Cyber-Risk Management 2024 Report

In the rapidly evolving landscape of cybersecurity, organizations face an ever-growing array of threats that demand proactive risk management strategies. This webinar delves into the critical importance of cyber risk remediation, emphasizing the need for a comprehensive approach to safeguarding digital assets.

The session will walk through the CyberStrong platform and review the simple and intuitive process of modeling cyber risks in the platform based on your selected model. In today’s webinar, we will spotlight the significance of adopting a quantitative approach to risk assessment and delve into how the FAIR model provides a structured framework for evaluating and prioritizing cybersecurity risks.

By the end of this session, you’ll see in real-time how easy it is to assess your risks in CyberStrong with patented automation that equips you to identify, prioritize, and remediate cyber risks effectively.

Mastering CRQ: A Deep Dive into FAIR and CyberStrong - APAC

Mastering CRQ: A Deep Dive into FAIR and CyberStrong - EMEA

In the rapidly evolving landscape of cybersecurity, organizations face an ever-growing array of threats that demand proactive risk management strategies. This webinar delves into the critical importance of cyber risk remediation, emphasizing the need for a comprehensive approach to safeguarding digital assets. Participants will explore the advantages of leveraging risk modeling as a powerful tool for identifying, assessing, and prioritizing potential threats.

The session will walk through the CyberStrong platform and review the simple and intuitive process of modeling cyber risks in the platform based on your selected model. In today’s webinar, we will focus on the NIST 800-30 model and deliver insights into how this framework serves as a practical guide for systematically assessing and managing cybersecurity risks.

By the end of this session, you’ll see in real-time how easy it is to assess your risks in CyberStrong with patented automation that equips you to identify, manage, and remediate cyber risks effectively.

Mastering CRQ: A Deep Dive into NIST 800-30 and CyberStrong - APAC

Mastering CRQ: A Deep Dive into NIST 800-30 and CyberStrong - EMEA

Easily map controls between CIS Top 18 to SOC 2 in seconds using CyberStrong’s patented AI technology. Attain actionable gap analysis between these top industry frameworks to see where you are and are not compliant to help your organization build a robust cyber risk posture. 

Performing cyber risk assessments across compliance requirements is challenging, especially for enterprises complying with multiple frameworks or standards. CyberStrong leverages Natural Language Processing (NLP) to decipher the actions and intent of the control, enabling a much more accurate mapping result.

Join this live demo that will walk you through the technology CyberSaint leverages to perform rapid crosswalks and demonstrates how to set up a crosswalking project within the CyberStrong environment.

NLP-Backed Crosswalking: CIS Top 18 to SOC 2 Controls - APAC

NLP-Backed Crosswalking: CIS Top 18 to SOC 2 Controls - EMEA

Easily map controls between CIS Top 18 to CMMC 2.0 in seconds using CyberStrong’s patented AI technology. Attain actionable gap analysis between these top industry frameworks to see where you are and are not compliant to help your organization build a robust cyber risk posture. 

Performing cyber risk assessments across compliance requirements is challenging, especially for enterprises complying with multiple frameworks or standards. CyberStrong leverages Natural Language Processing (NLP) to decipher the actions and intent of the control, enabling a much more accurate mapping result.

Join this live demo that will walk you through the technology CyberSaint leverages to perform rapid crosswalks and demonstrates how to set up a crosswalking project within the CyberStrong environment.

NLP-Backed Crosswalking: CIS Top 18 to CMMC 2.0 Controls - APAC

The CyberInsight Model: Quantifiable, Transparent, and a Driver of Success

STRONGER 2022: Model to Quantify Cyber Security Risks

FAIR 101 & 102 - The Basics and Beyond

Live Demo: Leveraging the FAIR Model with CyberStrong

Leveraging FAIR to Unite IT, Cyber, and Vendor Risk Management

Enabling Risk Register Benchmarking with CyberStrong

Risk Modeling: Quantify Cyber Insights for Effective Risk Management

As boards demand greater insight into their cyber posture, CISOs are being expected to dive deeper into the enterprise's exposure to and management of cyber and IT risk. Black-box risk analysis and quantification products and processes don't hold up in these circumstances and, in some cases, can severely limit a security leader’s ability to explain cyber risk to the Board. Join CyberSaint Enterprise Account Executive Patrick O’Brien and Booz Allen Hamilton Senior Associate for Commercial Cyber Strategic Consulting Christopher White as we dive into why opaque risk quantification is limiting your Board’s understanding of cyber and what methodologies enhance their understanding instead of hinder it.

Why Your Risk Quantification Method Limits Your Board’s Understanding of Cyber

risk quantification

fair

NIST

cybersecurity program management

CISO

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

The IT project management community on BrightTALK includes thousands of IT project and portfolio management professionals. Find relevant webinars and videos on agile methodologies, scrum strategy, project management processes and more. Attend live webinars or view on demand content presented by recognized thought leaders in the IT project management industry.

IT Project Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Why Your Risk Quantification Method Limits Your Board’s Understanding of Cyber

Presented by

About this talk

More from this channel