When security practitioners look at brand risk, they often rely on security controls that focus on securing the organization for threat actors targeting the organization’s infrastructure in order to disrupt service, or steal confidential information. Often times, we forget about what is going on outside of the organization that could cause the organization’s brand harm as well. This presentation will discuss what is brand risk, how organizations need to account for the brand, and best practices to mitigate that risk.