Protecting What Matters Most – Tools for Managing Risk
summary
Panelists argue organizations must map cybersecurity into enterprise risk management using practical artifacts: NISTIR 8286 guidance, a maintained risk register, heat‑map dashboards and scorecards tied to business goals. They recommend feeding vulnerability scans and SIEM outputs into prioritized remediation tracked by governors, using threat‑intelligence summaries for leaders, and treating compliance (CMMC, NIST SP 800‑53) as an outcome of good controls. Success measures show risk trending down over time rather than single technical metrics.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 0:50Panel Introductions
- 3:15Enterprise Risk Management
- 12:13Compliance and Business Risks
- 15:35The Venn Diagram
- 17:59Finding the middle ground
- 19:48Integrating cybersecurity into enterprise risk management
- 22:41Chasing negative risks
- 24:00Communication
- 25:23Leadership
- 26:33Metrics
- 31:00Learning from business
- 32:23Outro
related talks
27mSolving CISO Headaches: How to Align CTI and Risk Management
50mManaging Cyber Risk to Systemically Important Critical Infrastructure
28mHow to Tell the Right Cyber-Story to Executives and Board Members
38mCyber risk management: Bringing security to the boardroom
31mRound Table | What Is Security Worth?
47mTechniques to Evolve Risk Governance and Comply with SEC Cybersecurity Rule
47mCybersecurity: Is It about Business or Technology?
15mTelling Hard Truths to Impact Change in Cybersecurity