About this session
Having looked at how governance affects risk management in his previous session (which you can see here), Tom is back to discuss how policies and procedures also impact implementing effective risk management.
The use of data, particularly personally identifiable information, has enormous commerce potential but also the risk of abuse. Organisations are paying closer attention to how they manage information than ever before. The rise in cyber attacks, which expose personal data, has shed new light on how companies oversee information and technology through processes, people, and culture.
In this fascinating two-part series from BSI, Tom invites us to consider the governance that sets the direction of our organisations and the inputs, outputs, and risk alignment of this.
In this session, we will look at:
- The governance outputs from regulation, industry, ethics, and culture.
- Considerations towards our policies and procedures, training, education and sanctions, together with the controls and metrics.
Tom will demonstrate a holistic approach to cybersecurity and how we ought to centre on our workforce, with all the smart technology being the bolt-on: “Academically, the risk appetite is there, but practically, the budget and resources may be misaligned.”
Speakers
Have a question on this talk?
Send it to the presenter. The team passes it on and the reply comes to you by email.
