Top 5 secrets to successfully jumpstarting your cyber-risk program

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

SESSION ID:SESSION ID:
#RSAC
Chris Houlder
Top Five Secrets to Successfully
Jumpstarting Your Cyber-Risk Program
GRC-W03
C...

#RSAC
Situational Context
2
Autodesk undergoing massive
business transformation to
cloud subscription model
Risk at center...

#RSAC
Our Challenge
Board Business Information Security
Product Security
Data Privacy
What are our risks?
What are we doin...

#RSAC
What Are We Here To Do
4
Share our story and walk through the process and key considerations for taking our cyber ri...

#RSAC
Our Approach – Top 5 Secrets
5
#1
Take a holistic view of
Cybersecurity
#2
Focus on strategy first
#3
Go Agile – Bui...

“In union there is strength”
― Aesop, Ancient Greek Fabulist

#RSAC
Our Approach – Top 5 Secrets
7
#1
Take a holistic view of
Cybersecurity

#RSAC
Understand That Cybersecurity is Multi-Discipline
8
Business
Led IT
Business
Led IT
Business
Led IT
Information Secu...

#RSAC
Unify Purpose and Approach
9
Vision Mission
Deliver security risk management capabilities that
highlight the value p...

“The essence of strategy is choosing what not to do”
― Michael Porter, Harvard Business School Professor

#RSAC
Our Approach – Top 5 Secrets
11
#1
Take a holistic view of
Cybersecurity
#2
Focus on strategy first

#RSAC
Multi-Tiered Risk Assessment
12
Tactical Risks
Strategic Risks
Tier 0
Tier 1
Tier 2
Security Risks (SRM)
Cybersecuri...

“Make it simple, but significant”
― Don Draper, Fictional Character from Mad Men

#RSAC
Framework-Agnostic Approach
14
Risks
• Risk analysis/threat model
• Asset scoping
Cyber Readiness
• Capability matur...

#RSAC
Risk Scenarios Tailored To Audience
15
with initiates against leads to
Actor
• Hacker
• Employee
• Third party
• Cus...

#RSAC
Example of Cyber Risk Scenario
16
<Risk ID> Third Party accidentally breaches cloud platform resulting in loss of cu...

“Life’s too short to build something no one wants.”
― Ash Maurya, Author of Running Lean and Creator of Lean Canvas

#RSAC
Our Approach – Top 5 Secrets
18
#1
Take a holistic view of
Cybersecurity
#2
Focus on strategy first
#3
Go Agile – Bu...

#RSAC
Go Agile – Build and Iterate
19
Minimum Viable Product
• Raised everything a level
• Directional quantification
vers...

#RSAC
20
OE Calculator (OEC) Risk Valuation Tool (RVT)
Purpose
The OE Calculator (OEC) facilitates the assessment process ...

“If you don’t get culture right, nothing else matters”
― John Taft, Former CEO of RBC Wealth Management
“It is a terrible ...

#RSAC
Our Approach – Top 5 Secrets
22
#1
Take a holistic view of
Cybersecurity
#2
Focus on strategy first
#3
Go Agile – Bu...

#RSAC
Design Principles
“Develop an efficient and effective system for enabling
organizationally aligned risk decision mak...

“In real life, strategy is actually very straightforward.
You pick a general direction and implement like hell.”
― Jack We...

#RSAC
Our Approach – Top 5 Secrets
25
#1
Take a holistic view of
Cybersecurity
#2
Focus on strategy first
#3
Go Agile – Bu...

#RSAC
Use Risk for Decision Making and Take Action
Resource Forecasting
Enable better decision making by forecasting
needs...

#RSAC
Closing Summary
27
Before
Program Stand Up
#1 Take a holistic view of Cybersecurity
#2 Focus on strategy first
#3 Go...

#RSAC
Future State Vision
Articulating ROI on Risk Investments in Dollars
28
What’s next?
1) Enrich data-set of tool by in...

#RSAC
Future State Vision
Articulating ROI on Risk Investments in Dollars
29

#RSAC
Future State Vision
Articulating ROI on Risk Investments in Dollars
30

#RSAC
1
Next week you should:
• Assess how you are communicating the value and focus of your program
- Do you discuss tech...

Share Slideshare

LinkedIn
Facebook
Twitter

Embed

Size (px)

Show related Slideshows at end

WordPress Shortcode

Link

Share
Email

2024 Trend Updates: What Really Wor... by Search Engine Jou... 1063109 views
Storytelling For The Web: Integrate... by Chiara Aliotta 981811 views
Artificial Intelligence, Data and C... by OECD Directorate ... 923520 views
How to Leverage AI to Boost Employe... by SocialHRCamp 392340 views
2024 State of Marketing Report – by... by Marius Sescu 221896 views
Everything You Need To Know About C... by Expeed Software 237729 views

View on Slideshare

1 of 31 Ad

View on Slideshare

1 of 31 Ad