The document discusses cybersecurity risk measurement and Unisys TrustCheck, a service that quantifies cybersecurity risk in economic terms. TrustCheck uses a patented model to assess organizations' cybersecurity posture and risk exposure in dollar amounts. This allows security leaders to communicate risks and investments to executives in a clear, objective manner and determine the return on investment of security controls. The service provides an easy-to-understand subscription model to periodically assess risk and guide security decisions.

1. Cybersecurity Risk Measurement in Dollars and
Sense
Unisys TrustCheck™
Martyn BARTLETT 0411 183185

2. 2© 2019 Unisys Corporation. All rights reserved.
Cybersecurity is now a boardroom concern
Cyber-attacks and massive data fraud among top 5
risk1
Only 11% of organizations quantify their estimates
in economic terms3
Cybersecurity Remains Top Concern for Risk
Managers2
34% of organizations have no method to
measure or express cyber risk3
Traditional, subjective approach to measure cybersecurity isn’t’ working!
1 2018 Global Risks Report, World Economic Forum
2 11th Annual Survey of Emerging Risks, Society of Actuaries
3 2018 Marsh-Microsoft Cyber Perception Survey
Fewer than half of organizations estimate the
financial impact of a cyber incident3
Only 18% of directors said they receive such
information3
Senior Leaders often
appear to either not
understand the
information on cyber
risk they receive, or
not receiving it all3
© 2019 Unisys Corporation. All rights reserved.

3. 3© 2019 Unisys Corporation. All rights reserved.
Unisys TrustCheck™
TrustCheck™ fundamentally transforms cyber
risk metrics and reporting, enabling better
security decision making and empowering
clients to connect security initiatives with
business strategy.
TrustCheck enables you to convert the
complexities of cybersecurity and cyber risk
management into high-level financial outputs
that are objective, reliable, and easy to
articulate.
Cybersecurity risk assessment with actionable insights leadership understands.
© 2019 Unisys Corporation. All rights reserved.

4. 4© 2019 Unisys Corporation. All rights reserved.
Transform how you understand and measure risk
Assess cybersecurity and cyber risk
posture in economic terms.
Easily communicate risk reduction
initiatives to the board.
Analyze the return on investment of
cybersecurity investments.
Prioritize risk mitigation strategies.
Understand where the risk transfer
zone is for all cyber perils.
Bridge the gap between the CISO and leadership decision
Determine the likelihood of a cyber-
related financial loss.
UnisysTrustCheck™

5. 5© 2019 Unisys Corporation. All rights reserved.
Powered by X-Analytics® Engine – SSIC Partnership
X-Analytics® is the world’s first cyber risk quantification
model used to financially model cyber risk exposure end-
to-end across the risk management ecosystem.
The patented model is being used to underwrite billions of
dollars of affirmative cyber risk insurance, produce board-
level cyber risk analysis, and quantify aggregated cyber
risk across portfolios. It incorporates massive volumes of
historical breach data to inform and create its model.
With Unisys TrustCheck™, you can benefit from the independent, objectively researched X-analytics engine
© 2018 Unisys Corporation. All rights reserved.

6. 6© 2019 Unisys Corporation. All rights reserved.
TrustCheck™ Advantage
Zero technology to deploy, places
no burden on client resources.
Simple
Converts the complexities of
cyber risk exposure into clear,
reliable and repeatable financial
outputs.
Objective
Dynamic X-Analytics cyber risk
model adapts to each unique
client.
Flexible
Security leaders can now change security investment conversations from fear, uncertainty and doubt to objective
cybersecurity economics.

7. 7© 2019 Unisys Corporation. All rights reserved.
TrustCheck™ Delivery Structure
Bridge the gap between the CISO and leadership decision
Initial Unisys
TrustCheck™
Consulting
Services
Data
Modeling
Review and
Decisions
Periodic Refresh
Consulting
Services
TrustCheck™ Portal
• Easy to understand
subscription model
• Service leverages our
senior Cyber Risk
Consultants
• Secure Portal - model risk
and make more informed
decisions
• Refresh and Repeat
TrustCheck™ Managed Security Service

8. 8© 2019 Unisys Corporation. All rights reserved.
Allowing CISOs to deliver impactful messages to Decision Makers

9. 9© 2019 Unisys Corporation. All rights reserved.
The details allow organizations to make informed decisions
Risk Guidance: Volume Encryption
Expected Loss Improvement = $1.2 million
Cost to Implement = $2.7 million
Economic Analysis = - $1.5 million
Executive Decision = Do Not Proceed
There is always a balance between the value of remediation and the cost of remediation
Value of
Remediation
Cost to
Remediate
Risk Guidance: Web Application Firewall
Expected Loss Improvement = $1.8 million
Cost to Implement = $0.2 million
Economic Analysis = + $1.6 million
Executive Decision = Proceed