SIRACon2012 – Bob Rudis – Is your Organization ready for a risk management program?
iSpeech.org
Cyber Risk Management may be the new 'black' in infosec, but just how ready is your organization to adopt a comprehensive information [cyber] risk management program? Understanding where you are now is critical, because you can't just go from 0-OCTAVE in 5 seconds. After this talk, you should be able to analyze the gaps in your current organization, start framing even the most compliance-driven program in basic risk terms and gradually move from reactionary spend to qualitative/quantitative-based prioritization. Surprisingly, you may find you actually do have a risk management program and just need to help it grow and mature.
source
Gloss