Yes, Better Risk Management is Like Herding Lizards -- But It Can Be Done

No ratings

Presented at CSO40 2014 by

Andy Ellis

Ever watch lizards scatter haphazardly when they are threatened, or when they simply recognize something they suspect is dangerous? It’s the same arbitrary action organizations often take when they're told of the potential dangers to their information and supporting technology. Rather than understand and own the risks -- and then develop focused risk management models to effectively mitigate them -- organizations instinctively scramble for any (and as much) cover as they can. In this session, hear how organizations generate real security value when they are aware of -- and believe in -- the risks, seize the opportunity to understand their risk appetites, and change their instincts to be proactive rather than reactive.