Using Cyber Data To Financially Quantify Cyber Risk Decisions
summary
Kovrr converts Microsoft security telemetry into dollar-based loss distributions, pulling inventory and posture from uses Microsoft Defender and Sentinel APIs and mapping controls to NIST CSF, then running 10,000 Monte Carlo simulations to produce a loss curve (for one demo company the model shows 24% chance of $10M+ loss and about 1% chance of $77–80M loss). Models are calibrated with insurer claims, report impact buckets (ransomware, BI, data theft), show per-control ROI (example: moving a control up saves ~1.62% of exposure), and deploys from Azure Marketplace.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 1:24Why is it that cyber is so threatening
- 5:38How we do this
- 7:54Demo
- 11:15Output
- 17:13Cyber Insurance
related talks
15mFrom Risk to Return: Measuring Cybersecurity ROI with Data Analytics
40mHow Risky Is Cybersecurity Insurance?
45mClosing the Gap: Monetary Quantification of Cybersecurity for the Board
50mBetter Risk Assessment for Cyber Insurance: How Will We Get There?
47mYour Cybersecurity Budget Is a Horse’s Behind
28mHow to Tell the Right Cyber-Story to Executives and Board Members
51mFAIR STRIDE - Building Business Relevant Threat Models
57mHow Do Cyber Insurers View The World?