Cyber economics
Everything I've written on cyber economics, with the research pieces first. Each one ends with something you can do on Monday.
Dealing with one of these problems yourself? I work with organizations that need answers, not another slide deck. Let's talk.
What's in a five-angle short
Most subjects here are one page with five short sections, always in this order. Each has its own colour inside the article so you can jump to the one you need.
- 1Where I'd start: the first move I'd make, and the question I'd ask before spending anything.
- 2Where plans fail: where plans on this subject usually break, and the assumption I'd test first.
- 3Beyond the jargon: what the subject actually means once the vendor language is stripped out.
- 4What good looks like: the result that would tell you it worked, and the number I'd watch.
- 5The call leaders can't dodge: the decision leadership has to own, and what it needs on the table to make it.
-
Business interruption
I would not begin business interruption by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one ...
-
Cyber catastrophe modeling
I would not begin cyber catastrophe modeling by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and...
-
Cyber insurance
I would not begin cyber insurance by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one scenar...
-
Cyber investment prioritization
I would not begin cyber investment prioritization by buying another platform or launching a large programme. I would find the boundary, the accountable owner...
-
Cyber risk quantification
I would not begin cyber risk quantification by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and ...
-
Executive risk communication
I would not begin executive risk communication by buying another platform or launching a large programme. I would find the boundary, the accountable owner, a...
-
Loss scenarios
I would not begin loss scenarios by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one scenari...
-
Risk appetite
I would not begin risk appetite by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one scenario...
-
Security ROI
I would not begin security ROI by buying another platform or launching a large programme. I would find the boundary, the accountable owner, and one scenario ...
-
Third-party concentration risk
I would not begin third-party concentration risk by buying another platform or launching a large programme. I would find the boundary, the accountable owner,...
-
What a breach actually costs, and why the headline number is wrong
The average-cost-of-a-breach figures that circulate every year are useful for one thing: convincing a board that the number isn't zero. For deciding what to ...
Nothing matches. Try another word, or ask me directly.