Event Recording

How to use the ISO 27002:2022 to model and quantify cyber security risks

Show description
Speaker
Hernan Huwyler
Executive Program Director - Head of Group Risk
IE Business School - Milestone Systems
Hernan Huwyler
Prof Hernan Huwyler, MBA CPA is a governance, risk, and compliance director at multinational companies in consulting oil and gas, and financial services. He currently serves Academic Director at the IE Law School. During his 23-year career, he implemented models and facilitated assessments to...
View profile
Top related content
Event Recording
Ovidiu Ursachi: Return on Investment in Cybersecurity
Jun 09, 2020
Event Recording
Different (Development) Stages of Cyber Risk Management
Nov 11, 2021
Event Recording
Model to Quantify Cyber Security Risks
Nov 09, 2022

Get a model and recommendations to quantify cyber security risks including the costs of fines, contractual compensations, service credits, and loss of income. The use of heatmaps with qualitative criteria and arbitrary cocktails of threat and control efficiency data prevents the secure planning of IT services and corporate defense. Learn from a demo on Monte Carlo Simulations in a native MS Excel model. It can be used from comparing service providers to calculating the coverage of cyber insurance. This session will not only allow you to avoid money holes in consultancy but also justify cyber security investments.

Event Recording
Matthias Reinwarth: Optimizing Your Cybersecurity Spending: Where to Put Your Money During and After the Crisis?
Jun 08, 2020
Event Recording
Stop guessing about your Cyber Risk!
Nov 15, 2023

Cyber risk isn’t just a technical problem but a strategic one. Through Cyber Risk Quantification CISO’s are enabled to quantify the financial benefit of their cyber security strategy and are empowered to communicate with the Executive Board on eye-level and get the buy-in that you need. Join this session to learn how other companies are finally getting full transparency on their cyber exposure, ensuring not only they’re making the right investments in cyber security but also getting the right ROI of such investments.

Event Recording
Workshop | Implementation of a Risk Class Model Within Access Management
Nov 09, 2022

In this workshop, we will show you how to implement a risk class-based approach within access management with little effort in order to achieve the highest level of control, compliance and transparency in your own organization. All the necessary rules and templates (e.g., for password management, connection guidelines for protocols used and authorizations) are based on best practices, the BSI risk class model and the requirements of ISO27001.

Webinar Recording
How Mature is Your Cloud?
Oct 04, 2013

KuppingerCole Webinar recording

Event Recording
Jan Tietze: Minimising Risk from Cyber Threats: Focus on Reducing Time to Containment
Nov 13, 2020
Webinar Recording
Effective Cyber Risk Quantification Through Automation
Jun 07, 2022

Continual high-profile cyber incidents demonstrate beyond a doubt that cyber risks exist, but most organizations struggle to quantify cyber risk in a useful way. There is an urgent need for IT security leaders to find a common way to express cyber risk in monetary terms, that business leaders understand to enable effective risk management and security investment.