Here is a mega update on several items I’ve been working on lately.
First, I did a podcast with ThreatConnect talking about CRQ. We did a bit of a retrospective on the FAIR book as well which was nice.
Next is a piece I wrote for ISACA about how to not over-respond to current work from home trends in this article about Zero Trust
I also wrote a piece for the NACD about how to apply cyber scenario management to better your risk management practices.
Finally I wrote this article, also for ISACA, about advanced applications of the risk treatment options and how they are not all the same.
The Risk Dr ® 