Managing Cyber Risk Against Unrealistic Expectations

About the Episode

Most organizations fall victim to cyberattacks because business leaders don’t understand the risk. They don’t see their business as a target, they deny the threat, or believe technology alone can prevent any cyberattack. This cyber-cognitive dissonance creates significant challenges for CISOs who must quantify risk and prioritize resources to protect what matters most.

In this fireside conversation between Tia Hopkins and Rich Raether, Chief Information Officer at Quarles & Brady LLP, they dive into the challenges of managing and quantifying cyber risk. Tia and Rich share their hard-won lessons, and provide practical guidance on how to evaluate cyber risk, align to business priorities, improve your cyber resiliency, and communicate expectations to non-technical business leaders.

Discussion topics include:

• Working with security experts to build an adaptable security program
• Evaluating and communicating risk & outcome management
• Prioritizing risk while aligning security resources to business objectives
• Improving the business’ ability to respond to cyber incidents in order to prevent business disruption
• Driving certification and using cyber frameworks to secure the business rather than meet compliance obligations