New ISACA Paper Enables Enterprises to Use Cyberrisk Quantification to Improve Approach to Cybersecurity Risk

By AIT News Desk On Jun 9, 2021

Cyberrisk quantification (CRQ) expresses cybersecurity risk in terms of monetary value to the enterprise, translating technology concerns into business concerns. A new white paper from ISACA, Cyberrisk Quantification, addresses the importance of acquiring useful data and amplifying it as part of a CRQ analysis.

New ISACA paper enables enterprises to use #cyberrisk quantification to improve approach to #cybersecurity risk.

The white paper outlines considerations related to measurement—exploring verbal, ordinal and ratio scales and the issues involved with each—as well as dives into the methods for gathering data, including external sources, internal data sources, and the opinions of subject matter experts.

Bluenote Raises $10Million from Lux Capital & Elad Gil to Transform Life Sciences Workflows with AI

Dec 20, 2024

Dynamic Infrastructure Introduces Groundbreaking AI Capability to Predict Future Deterioration in Civil Infrastructure

Dec 20, 2024

Pollo AI Launches Video-to-Video Feature, Revolutionizing Creative AI Video Creation and Outshining Competitors

Dec 20, 2024

Prev Next 1 of 40,645

Cybersecurity practitioners can then learn about how Monte Carlo Simulations can be used to transform quantified inputs into CRQ outputs, as well as how to integrate CRQ with other risk assessment methods, including control-based assessments and vulnerability assessments and static/dynamic code analysis.

“CRQ can be a critical enabler of improving organizations’ approach to cyber risk. However, cybersecurity measurement can bring its own set of challenges, including accurately gathering data and addressing issues with verbal and ordinal scales used to measure the risk,” says Paul Phillips, CISA, CISM, MBA, ISACA IT risk professional practices lead. “By understanding the CRQ techniques and additional risk assessment methods that can be implemented, as well as acquiring the right data from both internal and external sources along with SME insights, enterprises can have a clearer picture of the overarching threat landscape.”