Use quantitative risk assessments to drive better outcomes and smarter control investments

No ratings

Presented at CyberCON 2025 by

Tim Anderson

Attendees will learn how to use rapid risk assessments to quantitatively analyse risk and direct resource investment to the best controls. Key areas covered are: Data capture - whats important and what is fluff Decomposing threat scenarios using bow-tie analysis Using quantitative FAIR based methods How to integrate quantitative modeling into rapid rapid assessments Reporting and continuously monitoring results Once these key areas are covered, attendees will learn how to distill the output into control recommendations. Finally, and often overlooked, return on invesntment for controls will be addressed including long term trending, budget relationships, and leadership/board reporting.