Cybersecurity: Is It about Business or Technology?
summary
NIST argues cybersecurity is risk management tied to business outcomes, not just tech: it builds the CSF with five functions — identify protect detect respond recover — and reports 30 to 40 percent adoption of that risk approach by US companies. Programs include quantum‑resistant and lightweight cryptography, AI metrology, privacy‑engineering characteristics, and published NCCoE architectures for medical IoT (infusion pumps). Federal agencies spend over 30% of IT budgets on security and ~30,000 cybersecurity jobs stay open, so work focuses on measurable controls, toolchain integrity, and workforce pathways.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 3:21Cybersecurity’s role in business
- 8:31Balancing tech and business
- 13:57Measuring security’s value
- 18:47Privacy engineering and risk
- 22:28Behavioral cybersecurity and UX
- 25:44Tech transfer for security
- 30:28Diversity in cybersecurity
- 37:14Q&A: Key escrow and history
- 38:41Q&A: Diversity outreach
- 40:10Q&A: Terminology and failures
- 40:55Q&A: Self-driving car security
- 42:20Q&A: Security economics
- 43:24Q&A: Measurement and execs
- 44:55Q&A: Community and future
- 45:41Q&A: Space agency security
related talks
52mCybersecurity as a Business Conversation
40mCyber Risk Management Programs: Bringing Clarity to Cybersecurity
40mProtecting What Matters Most – Tools for Managing Risk
35mRevolutionizing Cyber Defense: The NIST CSF 2.0 Advantage
15mCybersecurity as a National Imperative
50mManaging Cyber Risk to Systemically Important Critical Infrastructure
30mCybersecurity Silver Linings
13mMaking best in class security ubiquitous