The Next Big Thing

[#1]

I’ve mentioned before the paradox of IT – the fact that there is an expectation of innovation as well as risk management; organizations need to plan their cyber defense.  I recently came across a document for those interested in The Financial Management of Cyber Risk – an implementation framework for CFOs.

The document was created by the American National Standards Institute (ANSI).

“The 76-page document offers a pragmatic action plan that addresses cybersecurity from an enterprise-wide perspective. Developed by a task force of more than sixty industry and government experts, The Financial Management of Cyber Risk: An Implementation Framework for CFOs has been funded and managed by the private sector and is offered as a free resource on cyber risk mitigation for organizations across the country.”

It consists of frameworks for:

1. Understanding and Managing the Economic Aspects of Financial Cyber Risk
2. Managing the Human Element
3. Managing Legal and Compliance Issues
4. Operations and Technology
5. Managing External Communications and Crisis Management
6. Analyzing Financial Risk Transfer and Insurance

How are you handling the paradox of IT?

[#2]

Some more information that ties-in with your Cyber Defense topic - I just saw where HP released its yearly cyber security report covering details on the latest security risks, prevention tips and trends. According to the report, 80% of network attacks are targeted toward Web-based systems: http://bit.ly/cezmG6