What BASE Jumping Taught Me about Risk

Explore the intriguing parallels between BASE jumping and cybersecurity risk management in this keynote address from BruCON 0x07. Delve into Shyama Rose's unique perspective on risk assessment, drawing from her experiences as both a BASE jumper and a cybersecurity expert. Gain insights into the nature of risk, false senses of security, and the impact of major breaches. Examine the concept of a risk continuum and learn how to reevaluate it in the context of cybersecurity. Discover strategies for systemic risk reduction and understand the importance of challenging the breach ego culture. Analyze the resource saturation problem in the industry and explore innovative approaches to prioritizing and managing risks effectively. Leave with a fresh perspective on risk management that can be applied to both personal and professional endeavors.

Introduction
Who am I
How I think about Risk
Why BASE Jumping
Risk of Death
What kills BASE jumpers
Why talk about risk
How are we dealing with risk
What is risk
False sense of security
Major breaches
Resource saturation
Spreadsheets
Risk Continuum
Reevaluating the Risk Continuum
Breach Ego Culture Priority
Systemic Risk Reduction
Bringing on Risk