Gender
Male
"Check out the NIST Cybersecurity Framework document. It provides a fairly comprehensive checklist of what to iD and assess. One caveat, such a sweeping assessment should be conducted periodically since the threats change so rapidly rather than…"
"I find that organizations that accomplish risk lists have not considered all aspects/areas of risk (for various reasons) so that the "top 5 or 10 risks" are invariably those that the chosen assessment tool/methodology assigns the highest risk level…"
"Agree on trying to predict performance. That's what we do ( on an individual risk basis) all the time in our risk assessments/impact analyses. But the one area we don't do well or often is go back and check what actually happened from an overall…"
"The one area I agree with Douglas Hubbard in is that very few (if any) organizations use some type of metrics to determine if their risk management efforts are bearing fruit. There are some metrics for how successful risk mitigation efforts are and…"
lead