Articles on risk operations: cyber risk quantification, board reporting, cyber insurance, threat and vulnerability prioritization, and DigitalXForce X-ROC, the XForce Risk Operations Center.
Qualitative risk ratings cannot support a budget decision. This article explains how DigitalXForce moves cyber risk modeling to quantified values a board and an insurer can use.
Moving From Qualitative to Quantitative Cyber Risk Modeling With DigitalXForce Read More »
Insider and outsider threats need different controls but one measure. This article explains how cyber risk quantification puts a value on both and guides where to spend.
Managing Insider and Outsider Threats With Cyber Risk Quantification Read More »
A small business owner needs cyber insurance sized to real exposure. This article explains how to assess the need, what a policy should cover and what insurers now ask for.
Assessing Your Cyber Insurance Needs as a Small Business Owner Read More »
Zero-day vulnerabilities are rising and patches arrive late. This article explains what effective cyber threat management looks like when the vulnerability has no fix yet.
The Rise of Zero-Day Vulnerabilities: A Call For Effective Cyber Threat Management Read More »
Risk quantification assigns a value to the potential impact of a cyber threat. This article explains the method, the data it needs and how the result supports decisions.
Risk Quantification: A Practical Approach to Measuring Cyber Threats Read More »
Cyber insurance covers losses that controls cannot prevent. This guide explains what a policy covers, what insurers require and how to prepare an application with evidence.
Defending Against The Unknown: A Guide To Cyber Insurance Read More »
Era of Automated Security Risk and Posture Management
Era of Automated Third Party Risk Management: Trust but Verify
Era of Automated Security Plans, Standards, Policies and Procedures
