Risk Management: Hindsight is 2020
summary
Covers how behavioral science explains why people and organizations ignore risks (illustrated by the COVID-19 pandemic) and why security teams often fail to get business action. Describes transforming traditional risk measurement and communication practices to achieve better buy-in and measurable action, aimed at CISOs and security practitioners.
AI-written summary · about
chapters (14)
- 0:00Intro
- 2:54Hindsight is 2020
- 7:57The Human Experience of Risk
- 10:27Who's Asking?
- 16:34What's The Worse That Could Happen?
- 18:44Categorize Tips
- 23:57Controls Tips
- 27:54Implementation Tips
- 30:31Embed Security Practices into Lifecycle Events
- 31:02Assessment Tips
- 34:31Authorization Tips
- 37:06Monitoring Tips
- 38:30Space Shuttle Challenger and Memory
- 41:07More Preparation Tips
related talks
29mManaging Risk with Psychology Instead of Brute Force
49mThe Language of the Business: Applying Behavior Science for Risk Management
15mTelling Hard Truths to Impact Change in Cybersecurity
40mThrough Your Mind’s Eye: What Biases Are Impacting Your Security Posture?
26mThe Risky Business of Risk Illiteracy (Sean Juroviesky)
31mThe psychology of security: Why we make mistakes
52mManaging Organizational Risk during a World Pandemic
51mYou Can't Measure Risk