Solving CISO Headaches: How to Align CTI and Risk Management
summary
Claims a practical path to merge CTI and risk: build threat profile documents, map adversary TTPs to the org’s crown jewels, and use a RACI-style racing matrix plus CMDB/risk-register feeds to turn CVSS into a contextual risk rating for vulnerabilities. Presents three case studies (vulnerability prioritization, ransomware/insurance, software supply chain) and a 20‑page white paper. Promises iterative, stakeholder-driven steps that reuse existing risk work, improve executive traction, and produce measurable prioritization for patching and controls.
AI-written summary · about
chapters (13)
- 0:00Aligning CTI and risk management
- 1:07Silos between CTI and cyber risk
- 4:38Integrating threat intelligence and risk
- 6:04CTI collaboration benefits
- 8:32Three-step process for alignment
- 11:41Operationalizing CTI workflows
- 14:51Risk prioritization collaboration
- 17:40CTI and risk frameworks
- 20:06Threat profiling alignment
- 22:15CTI and risk case studies
- 24:20Next steps for alignment
- 25:44Building business alignment
- 26:30Survey and closing
related talks
40mProtecting What Matters Most – Tools for Managing Risk
40mCyber Risk Management Programs: Bringing Clarity to Cybersecurity
43mCyber Threat Intelligence (Experts recommendations to enhance your security posture)
38mCyber risk management: Bringing security to the boardroom
36mNot Your Mama's Risk Assessment
47mTechniques to Evolve Risk Governance and Comply with SEC Cybersecurity Rule
43mThe Art of Vulnerability Management - Practical Application of Cyber Triage
15mTelling Hard Truths to Impact Change in Cybersecurity