Turn Policy into Action with Risk-Based Cybersecurity
The financial and reputational damages of cyber attacks cannot be underestimated as technology continues to advance.
Last year, cyber attacks cost companies an average of $8 million. Companies have therefore gone to great lengths to develop comprehensive policies that protect their assets. Yet, many organizations are still falling short when it comes to turning their cybersecurity policies into action.
Ineffective cyber policies are often the result of the assumption that cybersecurity is the responsibility of the IT department alone when, in reality, many departments hold pieces of the puzzle. (including risk management, information security, vendor management, finance, human resources, and others). Unfortunately, most organizations lack the ability to engage departments like vendor management, finance, human resources, and others to put the pieces together.
Taking a cross-functional, risk-based approach to cybersecurity is the only way to achieve this level of engagement. In this session, we'll discuss which departments typically hold each piece of the cybersecurity puzzle, as well as how to communicate between departments with a common risk language. Attendees will discover the reciprocal benefits of developing an integrated, iterative, and proactive governance program.
- Operationalize cybersecurity policies across departments and levels.
- Determine clear cross-functional accountability for cybersecurity responsibilities.
- Collect metrics that monitor the effectiveness of cybersecurity programs to present to the board and regulators.
Steven Minsky, CEO, LogicManager & Author of the RIMS Risk Maturity Model
Brendan Colliton, VP, Product Management, LogicManager
This event is sponsored by LogicManager, an OCEG GRC Solutions Council Member.
CPE Credit Notice : This is a group internet-based event for NASBA authorized continuing education credit. OCEG webinars are free for anyone to attend, but only Attendees who have an OCEG All Access Pass will receive a Certificate of Completion for the webinar indicating 1 hour of CPE credit.
OCEG is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have the final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.learningmarket.org. For information regarding administrative issues such as complaints or refunds, please contact OCEG at firstname.lastname@example.org.