Cyber Risk Management: let’s try to manage it with open source and free software
summary
Argues that open source GRC and risk tools can replace Excel and expensive suites by centralizing policies, assets, controls, evidence and schedules, and by adding connectors and light AI to keep risk data near real time. Mentions specific projects and modules: IRC with Asset Management, Incident Management and a free Community Edition; Cassistant that decouples risk and compliance for project work; Open RMF and Open Jersey for checklists and compliance. Highlights rising third party risk and the need to track assets to enable assessment.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:58Cyber security basics
- 3:03Risk management core
- 4:52GRC software role
- 6:42Control framework benefits
- 8:28Avoiding Excel chaos
- 9:12Commercial vs open source
- 10:43IRC solution overview
- 12:55Other free tools
- 13:59Asset management importance
related talks
15mCyber Risk Assessment, IT Asset Management and… AI obviously
25mDefining the Limits of Risk
27mBeyond Open Source Risks With the CRA and NIS2
47mTechniques to Evolve Risk Governance and Comply with SEC Cybersecurity Rule
29mOpen Source and IP Departments: Risk Containment and Portfolio Management
44mPanel Discussion: Prepare for the CRA: Open Source Governance in the Age of Cyber Resilience
36mNot Your Mama's Risk Assessment
52mRisk management: best practices for people with legal compliance to ship open source