The Risk Dr ®

Category: Risk

  • New Book: Fintech Growth and Deregulation

    My new co-edited book on FinTech published

    ·

    , , ,

  • Speaking at Cyber Risk NA

    I’m pleased to announce that I will be speaking again at Cyber Risk NA this year. I’ll be on a panel discussion about Modelling Cyber Risk (full program agenda here) I’ll see you in New York on the 20th of March. #CyberRiskNA  

    ·

    , , ,

  • Accepted at RSA – Quant Risk Implementation

    I’ve been accepted to speak at RSA about Quant Risk implementation #rsac

    ·

    , , ,

  • More on Smart Contracts

    I wrote some more on Smart Contracts for the ISACA Now Blog. I tied the concept back to Code = Law as put forth by Lawrence Lessig and talked some more about the scenarios that you’d need to risk model. You can read my thoughts on this here.

    ·

    , , ,

  • Lowest Common Risk Denominator

    I tackle the notion of risk appetite in this month’s column using some metaphors with which you might be familiar. You don’t get to pick your auto insurance coverage by expressing the number of accidents you are willing to accept, yet that’s how a lot of organizations think about cyber risk. Fortunately, the cyber insurance…

    ·

    , , , , ,

  • Smart Contracts

    I was interviewed for, and quoted in, this ISACA publication around Smart Contracts. Upon reflection, what we are really seeing is just a continuation of the concept of Code = Law as pointed out by Lawrence Lessig in his 1999 book, Code and Other Law of Cyberspace. The Smart Contracts doc is a free download…

    ·

    , ,

  • Cyber Deterrence

    I was reading up on cyber deterrence today and ran across this little gem in relation to nuclear deterrence: Because of the value that comes from the ambiguity of what the US may do to an adversary if the acts we seek to deter are carried out, it hurts to portray ourselves as too fully…

    ·

    , , , ,

  • Interesting Times

    In my latest column I wanted to call out some of the dichotomy that exists in the cyber world today. There are so many exciting new technologies in the world, and so much more risk inherent in them. Working in risk means that you can’t avoid bad things entirely (any more than you can stop…

    ·

    , ,

  • Pure Risk

    My latest @ISACA column was published today and in it, I talk about a concept called “pure risk.” It flies in the face of notions of “positive risk” that are in popular use. Understanding Pure Risk can help dispel any notion that Cyber Risk can be a good thing. You can read it here.

    ·

    ,

  • Risk and Regulation

    My latest @ISACA article was published today. In it, I focus on the notion of where our authority comes from in Information Security. Too often, in my opinion, we rely on regulation as a source of “why” when articulating control requirements. I think this is dangerous and counter to the very nature of what an…

    ·

    , , , , ,