Episode 121: The Economics of Cybersecurity Decision-Making
Here are some highlights from our episode:
- 01:55. How incentives, market failures, and other economic principles intersect with cybersecurity
- 08:39. A model of translating shared information as a way to capture complexity in cybersecurity decision-making
- 13:20. Pressing issues when making decisions about cybersecurity
- 18:08. How to have enough confidence and a cyber risk quantification model that's useful
- 23:45. How rigorous recommendations can help to match modeling and techniques like minimization
- 29:23. The role of the Board in making cybersecurity decisions and how to speak its language
- 34:57. Parting thoughts about risk quantification in cybersecurity
Resources
- Episode 105: Context in Cyber Risk Quantification
- 2024 DBIR Findings & How the CIS Critical Security Controls Can Help to Mitigate Risk to Your Organization
- CIS Community Defense Model 2.0
- FAIR: A Framework for Revolutionizing Your Risk Analysis
- Society of Information Risk Analysts