In a cover story for the National Association of Corporate Directors Directorship Magazine, James Lam – independent director on the RiskLens board, leader of the risk committee for the E*TRADE board, and FAIRCON18 keynoter– writes that board directors generally believe that business-disrupting (and even business-killing) risks are much more important now than five years ago
This year’s RSA Conference, Monday-Friday, March 4-8, in San Francisco is a great opportunity to hear some of the world’s best thinkers and doers in and around the FAIR movement and advanced techniques in risk management in general.
Every security organization is looking for insight into whether it’s headed in the right direction, but many get distracted by easy outs, like checking off boxes on a list of best practices and mistaking that for true maturity. FAIR Institute Chairman Jack Jones sets a higher standard of maturity
How do you quantify the loss of all an organization’s data? Or loss of all availability? Or loss of data integrity that might lead to lives endangered?
In an article for Forbes Technology Council, Two Frameworks For Securing A Decentralized Enterprise, Ian Amit, Chief Security Officer at Cimpress (parent company of Vistaprint), tells how he combines the NIST CSF and the FAIR model to handle a challenging situation
The Securities and Exchange Commission, the European Union and the International Monetary Fund all pointed cyber risk managers toward cyber risk quantification in 2018
In this video from the 2018 FAIR Conference, Steve Reznik, Director, Operational Risk Management and Marta Palanques, Director, Enterprise Risk Management at ADP, one of the most advanced quantitative cyber risk management shops, show how to identify and track key risk indicators (KRIs) over time to judge the real success of your inforisk management efforts.
With so much confusion in the marketplace about how much and what kind of cyber insurance to buy, experts from Marsh, AON, and more leading companies in the insurance space came together to form the FAIR Institute’s Cyber Insurance Workgroup to think through how the discipline of quantitative risk analytics could help clear the fog.
You’re sold on FAIR and quantitative risk analytics but until you bring your organization around, you’re just an army of one. In this panel discussion at the 2018 FAIR Conference, four successful FAIR intrapreneurs give some tips on how they built support, starting at the team level, and working their way up to the board of directors.