What's in Your Risk Assessment?

Explore a comprehensive approach to risk assessment in this 44-minute conference talk from the RSA Conference. Learn how to develop more effective and useful risk assessment methods that go beyond mere compliance to provide high-quality decision data for stakeholders. Discover techniques for quantitative risk assessment, including loss event scenarios, probability distributions, and trade studies. Understand how to map external requirements, troubleshoot assessments, and align with evolving regulatory landscapes. Gain insights from industry experts on calibrating risk factors, leveraging cyber risk data, and comparing scenarios to risk appetite. Ideal for professionals with some risk assessment experience, this session includes interactive polling and offers resources for further study and engagement.

Intro
Are we aligned?
Where's the risk assessment?
Quantitative Risk Assessment Flow
Risk exists where...
How much risk is associated with
Calibration Question
Loss Event Scenario Factors
Getting started with loss event scenarios
Attention cyber risk data shoppers...'
Probability Distributions
Trade Studies
Entities referencing "Risk Assessment"
Mapping to external requirements
Getting started with external requirements
Assets
Shopping for Data - CC Cust dB C
Loss event scenarios - Quantified
Top three scenarios by percentile
Comparing scenarios - Sans CC Cust dB C
Comparison to risk appetite - CC Cust dB C
Trade Study Library
Troubleshooting your risk assessment
Resources for further study and engagement
Recap
What's in your risk assessment?