Risk is often seen as a dirty word in business. It is a thing that needs to be reduced to nothing and has no possible good use in an organisation, especially a security programme.

This couldn’t be more wrong! Risk is an inherent part of any business, and yet it is often poorly recognised and leveraged in the security organisation. In this presentation Thom will look at three areas of the risk conundrum to open the veil on the elusive art of understanding and ultimately measuring risk:

1. The initial interpretation of risk and how it is often misunderstood.
2. The measurement of risk, and how some systems work and others don’t.
3. The effective treatment of risk, and how sometimes the obvious thing to do can be the wrong thing to do.

With the use of analogies and examples, the audience will appreciate that risk assessment, measurement and management is not always as straightforward as it might first seem. The audience will leave with a new appreciation of how risk can be leveraged for good and not just perceived as bad.

About the speaker

Thom Langford

CISO at Publicis Group

As Chief Information Security Officer of Publicis Groupe, Thom is responsible for all aspects of information security risk and compliance as well as managing the Groupe Information Security Programme. Additionally, the role is responsible for business continuity capabilities across the Groupe’s global operations. Having successfully built security and IT programmes from the ground up, Thom brings an often opinionated and forward-thinking view of security risk, both in assessments and management, but is able to do so with humour and pragmatism (mostly). An international public speaker and award-winning security blogger, Thom contributes to a number of industry blogs and publications. Thom is also the sole founder of Host Unknown, a loose collective of three infosec luminaries combined to make security education and infotainment films. Thom can be found online at both thomlangford.com and @thomlangford on Twitter.
Read more …