Roi Sharon (Cymulate) explains how to measure and manage cyber risks using the FAIR (Factual Analysis of Information Risk) model.
Key points covered:
1. The basic formula: Risk = Likelihood x Impact
2. Breaking down likelihood into measurable components
3. Importance of data in cybersecurity risk assessment
4. Key metrics: vulnerability, exploitability, and compensating controls
5. Using real-world analogies to explain risk concepts
6. Leveraging tools like vulnerability management systems and breach simulators
7. Importance of business context in prioritizing assets and risks
8. Calculating impact through asset valuation and business segment analysis
9. Tips for successful security posture management:
- Lead a culture of security
- Set KPIs for managers
- Maintain ongoing conversations with security teams
- Invest in quality security managers and tools
Learn how to effectively measure, communicate, and manage cyber risks in your organization using these practical insights and strategies.