Bathtubs, Snakes and WannaCry, Oh My! Risk in the Physical and Cyber World
summary
Argues for measuring cyber risk with a micromort-style metric (one-in-a-million chance) and uses concrete comparisons — driving 230 miles = one micromort, Everest = 38,000, parachute jump = 10 — to show intuition misleads. Classifies threats by lethality to an organization, number of organizations affected and likelihood, and cites WannaCry, NotPetya, TrickBot, SolarWinds, supply‑chain attacks, mega‑worms and human‑operated ransomware as examples. Recommends prioritizing high‑return controls (MFA over costly third‑party audits) and combining hygiene, detection, and operators.
AI-written summary · about
chapters (5)
related talks
22mSecurity and Risks
42mKeynote: The Expanding Universe of Cyber Threats
29mFighting Back Without Hacking Back: Why “Risk Management” Isn’t Enough In The Era of Cyber War
30mCybersecurity Silver Linings
41mThe Divine and Felonious Nature of Cyber Security
52mHow to prevent cyber-attack, & what to do when attacked?
40mCyber Risk Management Programs: Bringing Clarity to Cybersecurity
28mHow to Tell the Right Cyber-Story to Executives and Board Members