QSC24 - Operationalizing Risk Quantification Insights from the Frontlines

Jonathan Trull, CISO and SVP Security Solution Architecture, Qualys
Richard Seiersen, Chief Risk Technology Officer, Qualys

Cyber risk insights are crucial for organizations today. The discussion highlights the importance of operationalizing and quantifying cyber risk, using a case study of a tea company facing ransomware threats. It emphasizes the need for realistic measurement goals and a shift in cybersecurity leadership approach. Effective risk management requires top-level support, resource allocation, and a new data model to assess various risks, including third-party vulnerabilities. Automation and actionable insights are key to driving down risk.