Ostrich Cyber-Risk helps organizations reduce the complexity of identifying, quantifying and communicating cyber and operational risks related to your cybersecurity posture. Benchmarked against NIST CSF with references to best standards (NIST 800-53, ISO 27001, CIS 18, and more), the Birdseye™ SaaS solution offers both Assess and Quantify models, allowing you to perform a thorough, qualitative assessment and quantitative analysis of your risk all in one application.

The Birdseye™ Quantify solution with its CRQ Simulator simulates unlimited risk scenarios that attach resistance-based financial projections to specific situations, policies and outcomes to enable risk-reduction ROI calculations. Communicate these calculations in financial terms to your team, stakeholders and the board via downloadable, shareable reports.

C-Risk is a recognized expert in risk management and Cyber Risk Quantification using the FAIR™ methodology. This deep expertise in information and technology risk extends across multiple sectors, making C-Risk a trusted partner for organizations worldwide. Since launching in 2016, C-Risk has helped clients understand the information risks specific to their business, target their security investments more effectively, and protect their critical digital assets.

C-Risk also provides CRQ training, equipping risk professionals and decision-makers with effective methods to analyze and communicate cyber risk in financial terms. Driven by their commitment to growth and innovation, C-Risk is broadening its geographic presence and ramping up its research and development efforts to improve existing use cases and develop new ways to use CRQ.

EY supports you in elevating your approach to IT risk, cybersecurity and data privacy functions. Build security and resilience in systems, data and identity, so your organization can have visibility of and manage the risk in order to execute transformational change and enable innovation with confidence.

CISOs and CROs must act now turning risks into opportunities to reimagine and repurpose the organization for agility and long-term value.

Among the top issues facing risk leaders today are supply issues, environmental crises, technological disruption and demographic shifts. Instead of preparing for each category of risk in a silo, instilling organization-wide dynamism and enterprise resilience enables leaders to stay ahead of the entire risk landscape.

The Third Party Risk Association (TPRA) is the only vendor-agnostic, not-for-profit professional association that exists to further the profession of third party risk management (TPRM) through knowledge sharing and networking. As the all-in-one source for TPRM tools, templates, training, networking, blogs, videos, certifications, TPRM-specific conferences, Continuing Professional Education (CPE) credits, and industry best practices, TPRA seeks to enhance practitioner knowledge and encourage benchmarking and collaboration within the industry. 

As the threat landscape grows in complexity and regulations require organizations to review their third parties with a more focused lens, networking and benchmarking with peers has never been more important. TPRM practitioners are invited to join this international community and gain access to a wealth of benefits, all for FREE. Learn more at www.tprassociation.org.