Is it now time to sit down and write a proposal for cyber security metrics?

← Back to Blog

Is it now time to sit down and write a proposal for cyber security metrics? The number of high profile events over the past 10 years, the talk of a market correction across the insurance and capital markets, the issues with managing corporate cyber and the certainty that there will be more significant events ahead as cyber continues to cross from cyber warfare to corporate. I think so.

There is no doubt that cyber is a very complicated risk to manage and control. The number of variables within the cyber domain is huge. The mathematics of probability, dependencies and interactions makes it impossible to be able to control definitively.

But it’s now time to put a quantitative list down to provide a starting point for the things which we should all be measuring to manage. Manufacturers have been doing it for years, it’s the basics of JIT manufacturing, doing things consistently, repeatably and under control. It’s why we can make over 1.5bn smart phones a year, or over 80Mn cars. Which to a high degree of certainty work right first time.

But this relies on a clear understanding of cause and effect, continuous improvement and risk management and an understanding that perfection does not exist, you can never be 100% secure. Bring back 6 Sigma, all is forgiven.

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6572205104575889408