Not Your Mama's Risk Assessment
summary
Argues that traditional, ad hoc risk assessments produce PDF heat maps and Excel checklists that fail to answer real questions, and offers a pragmatic Solve for X approach: use tested frameworks (CSF, RMF), automation, infrastructure as code, containers and cloud security engines like Wiz/Lacework to pull telemetry instead of pushing paper. Gives a concrete vendor example: an AI dictation pilot promises 30% efficiency per clinician and a ~$30M annual ROI, forcing tradeoffs between mitigation costs and business value.
AI-written summary · about
chapters (12)
- 0:00Introduction and disclaimer
- 1:26Security as department of no
- 3:11Legacy risk assessment flaws
- 5:57CSF 2.0 culture shift
- 8:45Solving for X framework
- 10:12Value of risk assessments
- 13:20Reducing manual processes
- 15:46Leveraging existing resources
- 18:54Ad hoc risk assessment pitfalls
- 20:43Modern tech adoption challenges
- 23:55Department of so what
- 27:41Q&A on vendor assessments
related talks
55mAh mom, why do I need to eat my vegetables?
40mProtecting What Matters Most – Tools for Managing Risk
27mSolving CISO Headaches: How to Align CTI and Risk Management
51mThe Overlooked Security Risk: 3rd Party Risk Management
47mTechniques to Evolve Risk Governance and Comply with SEC Cybersecurity Rule
15mFrom Risk to Return: Measuring Cybersecurity ROI with Data Analytics
30mNavigating the New AI Security Landscape
51mYou Can't Measure Risk