Risk Quantification with FAIR (2): Risk Analysis Scenario Use Cases

CISO Tribe opens its virtual door once again to the community, to exchange ideas, evaluate the good, the bad and the ugly, challenge the status quo, and share lessons learned.

If we spend all this money that you are asking for, how much less risk do we have? Then I knew I was in trouble' Jack Jones in discussion with Ivan Milenkovic and explaining what triggered him to develop the FAIR Model -

CISO Tribe invites FAIR Institute (2): Risk Analysis Scenario Use Cases

In February, Jack introduced the FAIR Model for Risk Quantification to us and how we could apply it within our own organizations. We covered some use cases but only high level to explain where we are as a profession today when it comes to proper risk management & decision making, and where we could (should) be.

Time for the next step, diving into hands on FAIR Risk Analysis. Starting from creating your risk scenario statement and identifying the right risk scenarios to measure, and then we'll be moving through the analysis process.

* If you did not attend the first session and if you’re new to FAIR, we recommend that you watch the February recording beforehand (we’ll send it over to all registrants).

Your speaker:

Jack has worked in information security for over thirty-five years, ten years of which as a CISO with three different companies, including a Fortune 100 company. In 2012 Jack received the CSO Compass award for risk management leadership. An adjunct professor at Carnegie Mellon University, he teaches in the CRO and CISO executive programs.

Jack created the “Factor Analysis of Information Risk” (FAIR) model which has been adopted as an international standard. Currently, Jack is the Chief Risk Scientist at RiskLens and Emeritus Chairman of the FAIR Institute non-profit organization with over 13,000 members worldwide. He has also co-authored a book on FAIR entitled “Measuring and Managing Information Risk, a FAIR Approach” which was inducted into the Cyber Security Canon.

Your moderator:

Ivan is a seasoned cybersecurity leader with over 2 decades of experience in addressing cyber and infosec challenges across various sectors and industries. He served as the Group CISO at a leading global provider of customer experience and business solutions (BPO where he oversaw the security strategy, governance, and operations for 140,000+ employees and clients worldwide (60+ countries). Ivan has built global Cyber Operations and Resilience Centres, has been responsible for cyber solutions and services acquisitions and delivered successful projects and worked across US, Europe, Africa, Asia, and Australia.

His expertise spans MSSP, consulting, start-ups, and multinationals with broad sector coverage (BPO, FS, Healthcare, Integration, Defence,...). Ivan is holder of the prestigious S-CISO certification, Lead instructor and mentor for CISO 2.0 Program by SECO-institute and Founding member of the pan-European CISO Tribe and member of various other notable cyber communities.

Agenda:

15h00: Welcome -- Wim Stoffelen, CISO Tribe (NL)

15h05: Introduction by your moderator -- Ivan Milenkovic, CISO Tribe (UK)

15h10: Presentation -- Jack Jones, Founder FAIR Institute (USA)

15h35: Q&A Session -- Audience, Jack and Ivan

15h55: Closing remarks and next events -- Wim