Closing the Gap: Monetary Quantification of Cybersecurity for the Board
summary
Provides a downloadable QuantiSec model that maps NIST 2.0 and ISO 27001 controls into balance sheet, income and cash‑flow lines so boards see monetary impact (insurance payouts, forensics, PR, legal, audit premium changes). Tests on a med‑tech and Swiss IT firm show use cases for incident quantification, investment optimization and ESG disclosure; one analysis finds a ~5% loss in billable audit fees after a breach. Uses ERP data (SAP), risk forecasts and an equity‑to‑risk ratio to justify budget changes.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 2:36Transparency gap in reporting
- 9:49Cybersecurity costs and impacts
- 16:21Monetary quantification framework
- 22:32Financial statement model
- 29:09Implementation steps and use cases
- 31:25Q&A: Spreadsheet availability
- 33:57Q&A: Justifying security budgets
- 36:57Q&A: FAIR and tools compatibility
- 39:50Q&A: Quantifying reputational damage
- 41:16Q&A: Process ownership
- 43:23Q&A: Cyber risk simulations
- 44:53Q&A: Finance empowerment
related talks
22mUsing Cyber Data To Financially Quantify Cyber Risk Decisions
28mHow to Tell the Right Cyber-Story to Executives and Board Members
15mFrom Risk to Return: Measuring Cybersecurity ROI with Data Analytics
49mCybersecurity in the Boardroom - The Impact of the Latest SEC Proposal
30mCybersecurity Silver Linings
40mCyber Risk Management Programs: Bringing Clarity to Cybersecurity
28mThe Strategic CPO: Managing Risk and the Board
40mGetting Cybersecurity Funding from Your CEO: the 5 Critical Steps