Cyber Risk Quantification I: The Inside View

Summary

Cyber risks must be understood and measured to be managed, but this is not as easy as it sounds. In this first event of a two-event series on quantifying cyber risks we will explore the widely used FAIR (Factor Analysis of Information risk) framework and additional tools used to assess cyber risks within an organization. Natalie Bruggmann from IBM will speak about frameworks, tools, and practical examples. In a second input we will hear from Martin Sibler on how a large global organization like Swiss Re assesses and quantifies cyber risks in a pragmatic manner.  

Presenters

• Natalie Bruggmann, Senior Security Consultant at IBM Switzerland Ltd.
  Natalie has 10+ years of experience managing multiple Security projects spanning across Threat Management, Data Security, Cloud Modernization, Quantum Safe and Risk Quantification, currently supporting the Swiss Financial Services industry to enable major Security transformation programs. She’s passionate about driving end-to-end security programs to improve cyber security posture and justify investment on Security 

• Martin Sibler, Deputy Head Digital & Technology Risk Management at Swiss Re.
  Martin started his career as an Information Security Consultant at Swiss Re in 2001. Since then, he held positions in various functions in Information Security and Risk Management in Zurich and Armonk NY, managed global security projects, and conducted cyber risk assessments. He holds a Master of Advanced Studies in Information Security and CISA. 

moderated by Maya Bundt.

Agenda

17:45 Doors open – name tag collection
18:00 Welcome and introduction (Maya Bundt)
18:05 Exploring FAIR Framework and Additional Tools for Quantifying Risks’ (NatalieBruggmann)
18:30 Cyber Scenario Quantification: A challenge requiring a pragmatic approach (Martin Sibler)
18:55 Q&A
19:25 Closing (Maya Bundt)
19:30 Networking drinks (all)
20:30 end

Chapter Event

In our chapter events – access for members only – we present one or more speakers to share knowledge, updates and best practices on a specific risk topic. In small groups of risk professionals you can exchange thoughts and test ideas. More on SRA chapters. This event is hosted by the chapter Cyber Resilience.