The hack at the Oldsmar, Florida, water treatment plant, an attempt to inject harmful levels of lye, drew headlines fretting over the possibility of cyber-terror striking a utility sector with “few protections against hacking,” as the Wall St. Journal said.
We’re hearing from members that the market for cyber insurance has grown very tight, so we contacted Chip Block, chair of the Washington-area Chapter of the FAIR Institute, longtime cyber insurance expert
John A. Wheeler, Risk Management Technology Advisor for leading tech consultancy Gartner, is out with a LinkedIn blog post that forecasts 2021 as a year of “uncertainty and change”
A new study sponsored by email security solutions vendor Egress found that CISOs surveyed rely more on employees reporting email data breaches than data breach protection software
Phew, what a year 2020 was. Now that the new year has come, you may be thinking about how to start, change or stop doing activities within your FAIR quantitative risk management program. Let's take a look at five things you can do now for a better 2021.
RiskLens Senior Manager and Professional Services Architect Teresa Suarez covers a lot of ground in this 30-minute webinar, starting with the case for quantitative cyber risk management
Sarina Hothi first heard about FAIR™ (Factor Analysis of Information Risk) at her job interview at DoorDash, the fast-growing, fast-moving food delivery service. She was so impressed, she went home and started studying the FAIR book.
All end-user devices destroyed at shipping company Maersk by the NotPetya malware…Dating site Ashley Madison cancelling its IPO after a data breach…Equifax fined $1.7 billion
The MITRE ATT&CK framework is a tool used by many cybersecurity teams to help analyze adversarial attacks and techniques. By tracking adversary methods and styles of attack, organizations gain the ability to understand their cyber risk landscape from the threat actor’s perspective.
Recent surveys of business executives and board members by Harvard Business Review Analytics and PwC give evidence that the movement to cyber risk quantification and FAIR™ is growing, if from a small base: