The Risk Formula: What’s Wrong With It

Today’s episode we will discuss the popular risk formula, “Risk =  Threat x Vulnerability x Consequence/Impact and its limitations to actually provide accurate information for a cybersecurity investment or tactical decision. I will be leveraging the “Risk Analysis and Management for Critical Asset Protection (RAMCAP) framework that was also used by the Department of Homeland Security.

Previous
Previous

Tail Risks: What are you going to do differently?

Next
Next

The Open Dialogue: Building Trust in AI through Transparency and Collaboration