The Risk Dr ®

  • Joined RiskLens as Professional Advisor

    I recently accepted a position with RiskLens as a professional advisor. I’m looking forward to working with Jack Jones again as well the great team they have assembled there. My immediate project there will be advising on the product roadmap and assist them with taking their amazing quantitative risk platform to the next level. Official…

    ·

    , ,

  • Jack and Jack talk Risk Modeling at Cyber Risk NA

    Jack & Jack @RiskDotNet‘s #CyberRiskNA in action! “There isn’t a single part of our problem space that can’t be quantified.” –@JonesFAIRiq Did you catch these two during this morning’s live panel? Let us know what you thought. pic.twitter.com/NiC6FD6rm7 — RiskLens (@RiskLens) March 20, 2018 I had a great time this week at Risk.Net’s Cyber Risk…

    ·

    , , ,

  • Interviewed on the SEC’s new Cyber Risk Disclosure Guidance

    I was recently interviewed by the FAIR Institute on the recently released guidance for firms to disclose material cyber risk.

    ·

    , , ,

  • Cyber Risk Cassandras

    I wrote this latest bit for the @ISACA column after reading Richard Clarke’s book and trying to rationalize how it applies to cyber risk. It’s overly easy to predict failures and impending doom at a macro level, its much harder to do it at the micro level, which is infinitely more interesting and useful. You…

    ·

    , , ,

  • New Book: Fintech Growth and Deregulation

    My new co-edited book on FinTech published

    ·

    , , ,

  • Speaking at Cyber Risk NA

    I’m pleased to announce that I will be speaking again at Cyber Risk NA this year. I’ll be on a panel discussion about Modelling Cyber Risk (full program agenda here) I’ll see you in New York on the 20th of March. #CyberRiskNA  

    ·

    , , ,

  • Accepted at RSA – Quant Risk Implementation

    I’ve been accepted to speak at RSA about Quant Risk implementation #rsac

    ·

    , , ,

  • More on Smart Contracts

    I wrote some more on Smart Contracts for the ISACA Now Blog. I tied the concept back to Code = Law as put forth by Lawrence Lessig and talked some more about the scenarios that you’d need to risk model. You can read my thoughts on this here.

    ·

    , , ,

  • Lowest Common Risk Denominator

    I tackle the notion of risk appetite in this month’s column using some metaphors with which you might be familiar. You don’t get to pick your auto insurance coverage by expressing the number of accidents you are willing to accept, yet that’s how a lot of organizations think about cyber risk. Fortunately, the cyber insurance…

    ·

    , , , , ,

  • Smart Contracts

    I was interviewed for, and quoted in, this ISACA publication around Smart Contracts. Upon reflection, what we are really seeing is just a continuation of the concept of Code = Law as pointed out by Lawrence Lessig in his 1999 book, Code and Other Law of Cyberspace. The Smart Contracts doc is a free download…

    ·

    , ,