3.0MANAGING RISK
If it is connected to the Internet, your system is exposed to countless risks. Cybersecurity is primarily about risk management. Minimize your risk through smart practices. Ensure your systems are properly configured, patched, and audited. Ensure your workforce is trained and regularly tested. Make cybersecurity part of your daily business practices.
Brigadier General Gregory TouhillPresentation at Southern Illinois University—Edwardsville, School of EngineeringApril 2013
3.1 WHO OWNS RISK IN YOUR BUSINESS?
Risk is the potential of loss resulting from a given action. It is a function of the interaction of threats, vulnerabilities, and likelihood (or probability) of threats acting against you. While there is no universally-agreed-upon prescriptive formula that defines how to measure risk, it is essential that you have a firm understanding of the risk environment (i.e., “know your enemy”) as well as your vulnerabilities and the likelihood that deleterious events will occur (i.e., “know yourself”).
Life is full of risk. As an executive, one of your primary responsibilities is to manage risk to protect your business and create an environment for it to grow and thrive.
There are many people who will argue that risk can be transferred like a commodity, brokered away through investments in insurance carefully planned using complicated actuarial tables that calculate probabilities and effects. Insurance is an important investment and mitigation instrument to be ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access