Well worth a read. For cyber risk management to be successful it must be assessed as far down the organisations architecture as possible.

← Back to Blog

Well worth a read. For cyber risk management to be successful it must be assessed as far down the organisations architecture as possible. Accounting for the impact of cyber attacks on critical business processes, assets and data critical to business operations.

We are in danger here of going back to the good old days of BPM and Enterprise Architecture (EA), where we used TOGAF and BPMN to identify an organisations EA, critical assets, data and key controls. Building up appropriate scenarios and real time testing them across the organisation. The opportunity for cyber risk management is that most of the information we need to populate cyber risk models can be gathered real time. As its nearly always in an electronic form. Its designing and tuning them to the real world which is the challenge.

I remember 15 years ago, the EA debate was always one of cost and quality of inputs. But a mapped EA provides the data to be able to assess cyber risks, based upon people, process and systems.

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6684025921206394880