CIS RAM Workshop: Making CIS RAM Work for You
This two-hour workshop will demonstrate how to conduct a risk assessment – from beginning to end – using CIS’ new risk assessment method. A brief introduction to CIS RAM’s foundations will be followed by example walk-throughs of developing criteria for assessing and accepting risk, for evaluating current controls for risk (more…)
CRAIN’S Cybersecurity Roundtable – Reasonable Security
Four Chicago-area cybersecurity experts shared their thoughts with Crain’s on the ever-changing landscape, including what organizations can do to keep their workplaces, employees and customers safe with reasonable security strategies. Read the discussion.
NIST Cyber Security Risk Management Conference – Reasonable Risk
NIST Cyber Security Risk Management Conference – Reasonable Risk. Our partner, Chris Cronin will be speaking with Phyllis Lee of the CIS (Center for Internet Security). (more…)
Webinar | CIS RAM: This Math will Save you
View the recorded presentation of CIS RAM: This Math will Save You by Chris Cronin regarding reasonable cyber security. This material was presented at the Cyber Security Summit in Chicago. (more…)
SANS Security Leadership Poster: 5 Keys for Building a Cyber Security Program and CIS Controls
The SANS Security Leadership Poster: Five Keys for Building a Cyber Security Program and CIS Controls Version 7. (more…)
Cyber Security Summit Chicago for Reasonable Security – CIS RAM
Proud to have spoken at the Cyber Security Summit: Chicago – How to practice duty of care for reasonable security. CIS RAM: This Math will Save You by Chris Cronin at the Cyber Security Summit in Chicago. Based on balance – Duty of Care Risk Analysis (DoCRA). (more…)
Midwest Cyber Security Alliance Meeting – Duty of Care Risk Analysis: Leveraging the New Risk Assessment Method to Reduce Liability
Duty of Care Risk Analysis: Leveraging the New Risk Assessment Method to Reduce Liability
Duty of Care Risk Analysis (DoCRA) is a new standard that describes processes for evaluating information security risks and their safeguards so that the resulting analysis (more…)