Call us now:
The UK governments cybersecurity center NCSC has refreshed its cybersecurity risk management framework. Including a risk methodology aligned with ISO 27005. Facilitating a more structured approach to cybersecurity risk assessment, quantification and management. Released at a time when global regulators are introducing cybersecurity risk management regulation.
What would be helpful is for global cyber regulators to harmonise a cybersecurity risk taxonomy, much like Basel did for Operational Risk. ENISA released a threat taxonomy in 2016, that could do with a refresh (https://lnkd.in/eq8XWWHT). A cyber risk taxonomy provides a frame of reference to consider threats and vulnerabilities and drive inherent through to residual risk evaluation.
Ted Dziekanowski
#cyberriskmanagement #cybersecurity #cyberriskquantification
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7079713330914848768