article thumbnail

Adversarial Risk Management

FS-ISAC

We chase concepts that seem simple, such as "basic" network hygiene, asset management, and patching. But these approaches rely on tenets based on traditional operational and financial risk management. While “close enough” works in asset management for financial inventory, it can quickly prove useless in cybersecurity.

article thumbnail

The Colonial Pipeline Hack: Failure in Risk Management

LogisManager

Colonial Pipeline Hack: Failure in Risk Management. That’s why insurance premiums are increasing exponentially for those organizations that cannot provide evidence of an effective ERM program that has strong controls and a robust Incident Response program. This will also uncover poor management of privileged user accounts.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Five Strategies to Protect Against Ransomware and Other Cyberattacks

Risk Management Monitor

Cyberattacks can target many different points in an organization’s ecosystem, including firewall configuration, patch management, network segmentation and defensive technology. Strengthen Asset Inventory You cannot protect what you do not know exists or cannot see.

Alert 76
article thumbnail

Peer-Benchmarked Threat Resilience Metrics

FS-ISAC

It would be nice to have a clear answer for senior management and regulators about threat resiliency. The Index is facilitated by long-time FS-ISAC sponsor Security Risk Advisors, but it is developed by a wide group of intel, red, and fusion center leads from retail banks, asset managers, fintechs and insurers.

article thumbnail

Peer-Benchmarked Threat Resiliency Metrics

FS-ISAC

It would be nice to have a clear answer for senior management and regulators about threat resiliency. The Index is facilitated by long-time FS-ISAC sponsor Security Risk Advisors, but it is developed by a wide group of intel, red, and fusion center leads from retail banks, asset managers, fintechs and insurers.