Graham Martin

I would like to introduce a risk calculation approach that reflects Resilience and Incident Response which will look something like
Risk = Impact * Resilience * Incident Response. For IT this is especially applicable as when assessing a risk you must be able to determine what the impact this risk will have to the organization, is the IT…[Read more]

The answer to your question Edward, in my opinion and from my so far brief venture in to Op Risk from Info Sec, is a clear yes. Insurance is a valid risk treatment in certain circumstances, but I dont believe Cyber Risk is one of them, not entirely anyway. And, you need to know precisely the ‘nitty gritty’ of insurance cover, too many…[Read more]