The Business of Cybersecurity
summary
A concrete case drives the talk: a company with 20 endpoints (mostly Windows) enforces a 2-day patch policy and struggles to coordinate monthly Patch Tuesday work, while an oil and gas client estimates $24 million per hour downtime. The recommendations are specific: use GRC to prioritize internal high-risk systems, translate technical risks into business impacts and KPIs, automate people and process controls as well as technology, and align cyber targets with enterprise goals.
AI-written summary · about
chapters (10)
- 0:00Cybersecurity as business function
- 2:32Defining cybersecurity business
- 3:54Cybersecurity in silos
- 7:16Misaligned cybersecurity symptoms
- 13:14Root causes of challenges
- 15:41Four integration recommendations
- 25:59Why cybersecurity matters
- 31:19Conclusion and call to action
- 31:39Q&A: Balancing interests
- 35:10Q&A: Quantifying risks
related talks
28mHow to Tell the Right Cyber-Story to Executives and Board Members
30mCybersecurity Silver Linings
55mNavigating Top Cyber Risks And Regulatory Requirements
35mMeasuring change: Responding to cyber material risk
52mHow to prevent cyber-attack, & what to do when attacked?
50mBuilding Cyber Resilience - Considerations for CISOs
40mProtecting What Matters Most – Tools for Managing Risk
15mCybersecurity as a National Imperative