Are you using tools for cyber risk quantification? What are they?

Security Strategy & RoadmapGovernance, Risk & Compliance
3.7k viewscircle icon1 Upvotecircle icon30 Comments
Sort by:
CISOa year ago

EPSS
CISA KEV
EXF

Director of IT2 years ago

Have you considered Cyber Quant?

Executive Director, Enterprise Infrastructure & Cybersecurity in Finance (non-banking)3 years ago

CPI and CAAT

Director of IT in Software3 years ago

Yes. RiskLens

Global CIO in Consumer Goods3 years ago

Yes, we use OneTrust GRC.

Content you might like

How do you give access to your data sources at your organization? (i.e. Oracle, MySQL, SQL Server, MongoDB)

Internal applicaiton to share34%

Export data in excel to share54%

Direct access to data source44%

Using reporting tools to share out data29%

Other (please share below)2%

View Results

I'm looking to go for the Certified CISO certification & training as I'm an aspiring CISO. Any recommendations and additional certifications that I should be doing along with that? I already have CISSP. 

Read More Comments

Which insider threat are you most concerned about?

Inadvertent data breach/leak (e.g., careless user causing accidental breach)48%

Negligent data breach (e.g., user willfully ignoring policy but not malicious)46%

Malicious data breach (e.g., user willfully causing harm)4%

View Results

How often do you survey your organization for new, emerging risks? My company currently does quarterly surveys and I am contemplating dropping it down to 2x/year. Appreciate the insights!

Read More Comments

Can you share any effective processes/strategies you’ve used to integrate cyber risk management and enterprise risk management at your org?

Read More Comments