How can you put a price on Cybersecurity?
Using risk modelling techniques to understand the economic impact of Cybersecurity scenarios can change how the organisation approaches and talks about Cyber Risk. The focus will be on the ‘Why’ and ‘How’ of quantifying cyber risks, reflecting on IAG’s experience. We will outline the methodology used and how we tackled some of the challenges, such as the lack of reliable antecedent data. We will describe the benefits: both those we expected (e.g. improving communication of risk with the Board) and some more surprising outcomes.