Measuring the Wrong Metric – Lessons from Attacks on Critical Services
summary
Proposes a practical rubric that measures cyber impact by scale scope speed rather than headlines, and applies it to two incidents: Costa Rica (27 agencies hit, 9 severely disrupted, ransom demand ~$10M, total recovery cost ~$40–125M during a political transition; Ministry of Finance and customs systems knocked offline; Hive and KTI involvement) and Vanuatu (entire population ~130,000 affected, courts lose five months of records, nation shifts to Gmail/pen-and-paper and requires Australian assistance). Emphasizes four utilities—power, telecoms, data, movement of goods—as critical dependencies.
AI-written summary · about
chapters (9)
- 0:00Measuring impact over metrics
- 6:28Critical infrastructure misunderstood
- 14:15Interdependencies in services
- 23:07Ransomware beyond financial loss
- 32:43Costa Rica cyber incident case
- 43:30Vanuatu government outage case
- 46:19Cybersecurity delays and funding
- 49:53Allocating resources by impact
- 50:15Q&A
related talks
31mPerspective and Opportunity Costs of Cyber Attacks
51mGetting Serious: Critical Disruptions/Thinking/Responses (& Rumors of War)
10mCCyberattacks: Is the Juice Worth the Squeeze?
22mCyber...
14mBathtubs, Snakes and WannaCry, Oh My! Risk in the Physical and Cyber World
47mRough and Ready: Frameworks to Measure Persistent Engagement and Deterrence
25mFirst world cyberwar: public & private in Ukrainian cyber defense
40mPublic Health Cyber War Games: How Hackers are Exploiting Healthcare