Looking for some help. Does anyone have a view on building an inherent risk model to assess the risk of a cyber-attack on a fictitious company?

← Back to Blog

Looking for some help. Does anyone have a view on building an inherent risk model to assess the risk of a cyber-attack on a fictitious company? Coming up with the inherent financial impact. It may not be a discrete number, it won’t be precise, it maybe a range?

Does anyone have a view on the the top threats which should form part of the scenario analysis and whether or not an assessment should be drive by key processes or key systems, neither or both?

What are the views on how to assess financial impact categories. For example, lost production, damaged raw materials, lost sales, pay role costs, lost opportunity costs, legal costs, regulatory fines.

I’m excluding residual for the time being. Just starting on the baseline.

Thoughts?

Andy

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6638787706291838976