News Summary

• Using Cyber Risk Quantification (CRQ) and data to showcase cybersecurity threats and vulnerabilities is best way to get support from the board.
• BP has been using risk management across the business for decades, but in recent years, it has started applying the practice to cybersecurity.
• One of the key outputs which good data around risk can help quantify is the “dollar attribution” – and how proper cyber risk management can save the organization money by preventing or disrupting a potential future breach.
• The more data that gets added over time, the more accurate that model will become.