Cyber Risk Management Programs: Bringing Clarity to Cybersecurity
summary
Panel summarizes concrete risk practices: use NIST Cybersecurity Framework and MITRE ATT&CK to map gaps, run continuous vulnerability management plus penetration testing and public Bug Bounty programs (scaled results reported), move toward zero trust and cloud-native immutable infrastructure, and adopt automation for detection and response. Notes $40B in private investment, cyber insurance growing from ~$7B toward $20–50B with ~500 insurers, SolarWinds-style supply‑chain risk driving third‑party scoring and a proposed CISA cyber response fund.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 5:00Whats Working
- 7:40Whats Not
- 9:50Federal Perspective
- 13:40Measuring Maturity
- 15:50Assured State
- 18:28Cyber Insurance
- 21:02Cyber Insurance in the Cyber Risk Equation
- 22:20Is Cyber Insurance a panacea
- 24:05Cyber Response Fund
- 29:29Collective Defense
- 32:50Projections
related talks
38mCyber risk management: Bringing security to the boardroom
50mManaging Cyber Risk to Systemically Important Critical Infrastructure
50mBetter Risk Assessment for Cyber Insurance: How Will We Get There?
52mData-Driven Cyber Policy: From Dream to Reality
27mSolving CISO Headaches: How to Align CTI and Risk Management
30mCybersecurity Silver Linings
54mIntegration of Cyber Insurance Into A Risk Management Program
28mHow to Tell the Right Cyber-Story to Executives and Board Members