<?xml version="1.0" encoding="UTF-8"?>
<!-- generator="wordpress.com" -->
<urlset xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd"><url><loc>https://riskdr.com/2026/02/20/ai-didnt-break-risk-management/</loc><lastmod>2026-02-20T22:44:13+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2026/02/20/a-few-months-late-but-still-quantitative/</loc><lastmod>2026-02-20T22:35:32+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2025/01/02/introducing-my-new-book-ctrl-alt-risk/</loc><lastmod>2024-12-28T02:49:12+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2024/11/25/planting-the-seeds-of-cybersecurity/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2024/11/plant-pathology.png</image:loc><image:title>Plant pathology</image:title></image:image><lastmod>2024-11-21T17:42:12+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2024/10/09/leapfrogging-cyber-risk-maturity-why-quantitative-risk-is-the-future/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2024/10/screenshot-2024-10-09-1.52.19-pm.png</image:loc><image:title>Screenshot 2024-10-09 1.52.19 PM</image:title></image:image><lastmod>2024-10-09T17:57:12+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2024/09/05/new-insights-on-cyber-risk-governance-my-latest-article-in-the-isaca-journal/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2024/09/cyber-risk-governance.png</image:loc><image:title>Cyber Risk Governance</image:title></image:image><lastmod>2024-09-05T15:29:50+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2024/08/22/navigating-cyber-governance-post-chevron-deference-ruling/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2024/08/screenshot-2024-08-22-3.21.57-pm.png</image:loc><image:title>Screenshot 2024-08-22 3.21.57 PM</image:title></image:image><lastmod>2024-08-22T19:25:44+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2024/08/20/materiality-matters/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2024/08/screenshot-2024-08-20-at-11.29.10e280afam.png</image:loc><image:title>Screenshot 2024-08-20 at 11.29.10 AM</image:title></image:image><lastmod>2024-08-20T15:29:46+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2024/08/08/my-take-on-cyber-esg-synergy-in-the-isaca-journal/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2024/08/cyber-esg.png</image:loc><image:title>Cyber ESG</image:title></image:image><lastmod>2024-08-08T20:38:24+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2024/05/06/the-risk-sin-eater/</loc><lastmod>2024-05-07T23:20:53+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2024/03/23/common-sense-risk/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2024/03/dallc2b7e-2024-03-23-09.21.10-create-an-image-that-visualizes-the-concept-of-common-sense-risk-in-the-context-of-cybersecurity.-the-image-should-depict-a-person-standing-at-a-cro.webp</image:loc><image:title>DALL·E 2024-03-23 09.21.10 - Create an image that visualizes the concept of 'Common Sense Risk' in the context of cybersecurity. The image should depict a person standing at a cro</image:title></image:image><lastmod>2024-03-23T13:29:42+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2024/01/05/emotional-risk-decision-making/</loc><lastmod>2024-01-05T15:23:36+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2023/12/23/2023-eoy-cyber-risk-wrap-up/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2023/09/issa_ipadimage_september2023.webp</image:loc><image:title>ISSA_iPadImage_September2023</image:title></image:image><lastmod>2023-12-23T23:37:00+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/contact/</loc><lastmod>2023-09-06T20:17:30+00:00</lastmod><changefreq>weekly</changefreq><priority>0.6</priority></url><url><loc>https://riskdr.com/about/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2023/09/logo-black.png</image:loc><image:title>logo-black</image:title></image:image><image:image><image:loc>https://riskdr.com/wp-content/uploads/2023/09/screenshot-2023-09-06-4.09.41-pm.png</image:loc><image:title>Screenshot 2023-09-06 4.09.41 PM</image:title></image:image><image:image><image:loc>https://riskdr.com/wp-content/uploads/2018/03/jack-freund-2-social.jpg</image:loc><image:title>Jack-Freund-2-Social</image:title></image:image><image:image><image:loc>https://riskdr.com/wp-content/uploads/2012/04/jackfreund.jpg</image:loc><image:title>jackfreund</image:title></image:image><image:image><image:loc>https://riskdr.com/wp-content/uploads/2012/04/jack_freund_web.jpg</image:loc><image:title>jack_freund_web</image:title></image:image><image:image><image:loc>https://riskdr.com/wp-content/uploads/2012/04/jack_freund_300.jpg</image:loc><image:title>jack_freund_300</image:title></image:image><image:image><image:loc>https://riskdr.com/wp-content/uploads/2012/04/website.jpg</image:loc><image:title>Dr. Jack Freund</image:title></image:image><lastmod>2023-09-06T20:13:15+00:00</lastmod><changefreq>weekly</changefreq><priority>0.6</priority></url><url><loc>https://riskdr.com/2023/08/16/the-risk-of-quantifying-cyber-risk/</loc><lastmod>2023-08-16T17:28:11+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2023/05/23/icymi-mega-isaca-update-data-breach-costs-and-hanlons-razor/</loc><lastmod>2023-05-24T00:10:11+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2023/03/15/business-process-maps-are-boring/</loc><lastmod>2023-03-15T19:29:37+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2023/01/28/icymi-interviewed-on-ciso-insiders-podcast/</loc><lastmod>2023-01-29T02:04:27+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2023/01/16/learning-from-others-mistakes/</loc><lastmod>2023-01-16T14:42:26+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2022/12/22/icymi-digital-trust-and-improving-risk-programs/</loc><lastmod>2022-12-22T17:46:51+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2022/08/30/cyber-insurance-market-analysis/</loc><lastmod>2022-08-30T17:48:40+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2022/07/05/rise-of-the-chief-trust-officer/</loc><lastmod>2022-07-05T15:26:31+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2022/06/22/the-future-of-quantitative-cyber-risk-reporting/</loc><lastmod>2022-06-22T18:33:29+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2022/04/28/cyber-risk-warehouse-2022-april-ytd-icymi/</loc><lastmod>2022-04-29T02:21:14+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2021/12/16/nacd-post-connecting-cyber-ratings-and-credit-ratings/</loc><lastmod>2021-12-16T14:56:51+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2021/12/14/featured-on-ciso-series-hacking-cyber-risk-quantification/</loc><lastmod>2021-12-14T15:00:32+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2021/12/03/more-on-zero-trust/</loc><lastmod>2021-12-03T22:16:28+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2021/09/16/cyber-resilience-board-communication-interview/</loc><lastmod>2021-09-16T14:06:00+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2021/08/12/open-group-security-forum/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2021/08/security-forum-logo1-white-background.png</image:loc><image:title>security-forum-logo1-white-background</image:title></image:image><lastmod>2021-08-12T18:40:57+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2021/06/02/isaca-crq-whitepaper-a-webinar-and-more-crq/</loc><lastmod>2021-06-02T18:43:55+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2021/05/17/rsac-2021-presentation-building-a-global-cyber-rating/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2021/05/rsac_2021_social_promo_icon_anim_1609989125797001t8am.gif</image:loc><image:title>RSAC_2021_Social_Promo_Icon_ANIM_1609989125797001t8am</image:title></image:image><lastmod>2021-05-17T14:46:58+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2021/04/12/risk-treatment/</loc><lastmod>2021-04-12T18:59:58+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2021/03/26/wef-principles-of-board-governance-for-cyber-risk/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2021/03/1200px-world_economic_forum_logo.svg_.png</image:loc><image:title>1200px-World_Economic_Forum_logo.svg</image:title></image:image><lastmod>2021-03-26T18:25:01+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2021/03/17/crq-zero-trust-nacd-and-risk-treatment-options/</loc><lastmod>2021-03-17T15:40:26+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2021/01/20/how-to-report-cyber-risk-to-the-board/</loc><lastmod>2021-01-21T15:08:29+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2020/07/31/positive-risk-isaca-journal-and-more-nist/</loc><lastmod>2020-12-05T04:27:47+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2020/12/01/issa-distinguished-fellow/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2020/11/screenshot-2020-11-30-at-9.31.29-am.png</image:loc><image:title>Screenshot 2020-11-30 at 9.31.29 AM</image:title></image:image><lastmod>2020-11-30T14:35:07+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2020/11/30/cyentia-xtreme/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2020/11/screenshot-2020-11-29-at-11.32.33-pm.png</image:loc><image:title>Screenshot 2020-11-29 at 11.32.33 PM</image:title></image:image><lastmod>2020-11-30T04:36:43+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2020/10/02/pandemic-lessons-and-record-count/</loc><lastmod>2020-10-01T21:11:57+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2020/08/14/isc2-global-award/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2020/08/2020-gaa-nominate-banner-e1597373857549.jpg</image:loc><image:title>2020-GAA-Nominate-Banner</image:title></image:image><lastmod>2020-08-14T15:22:14+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2020/05/13/cyber-risk-frameworks-mitre-attck-and-risk-communication-in-the-isaca-journal/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2020/05/screenshot-2020-05-13-at-4.00.52-pm.png</image:loc><image:title>Screenshot 2020-05-13 at 4.00.52 PM</image:title></image:image><lastmod>2020-05-13T20:12:52+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2020/03/16/85-7-covid-19-free-march-update/</loc><lastmod>2020-03-16T21:34:24+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2020/02/11/feb-update-davos-nist-cloud-smart-and-risk-mgmt-maturity/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2020/02/image_668bccf5-1aad-4f78-bc9c-c2faf849d9c120200124_092216.jpg</image:loc><image:title>image_668bccf5-1aad-4f78-bc9c-c2faf849d9c120200124_092216</image:title></image:image><lastmod>2020-02-12T01:15:41+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2020/01/09/speaking-at-the-cyber-future-dialogue-in-davos-during-the-world-economic-forum-wef/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2020/01/cfd2020-logo.png</image:loc><image:title>CFD2020-Logo</image:title></image:image><image:image><image:loc>https://riskdr.com/wp-content/uploads/2020/01/cfd2020-speakercard-cyberrisk_panel_01.png</image:loc><image:title>CFD2020-SpeakerCard-CyberRisk_Panel_01</image:title></image:image><lastmod>2020-01-09T17:54:50+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2020/01/09/welcome-to-2020-cyber-risk-prospectuses-and-a-manifesto/</loc><lastmod>2020-01-09T17:34:23+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2019/12/06/rsa-2020-nist-csf-and-dark-reading/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2019/12/rsac2020-speaker_social_icon.jpg</image:loc><image:title>RSAC2020-Speaker_Social_Icon</image:title></image:image><lastmod>2019-12-15T05:28:10+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2019/10/10/nist-csf-vendor-risk-and-threat-intel/</loc><lastmod>2019-10-10T20:11:08+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2019/08/23/risk-frameworks-equifax-and-public-sector-risk/</loc><lastmod>2019-08-22T19:46:41+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2019/07/11/apex-threat-agents-more-hitrust-quant-qual-showdown-and-iran/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2019/07/jack-freund-speaks-at-fair-breakfast-rsa-2019-b.png</image:loc><image:title>Jack-Freund-Speaks-at-FAIR-Breakfast-RSA-2019-B</image:title></image:image><lastmod>2019-07-11T18:01:48+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2019/06/07/zombieload-business-acumen-hitrust-and-dhs-directive/</loc><lastmod>2019-06-09T15:42:49+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2019/04/02/security-leadership-is-risk-leadership/</loc><lastmod>2019-04-02T01:43:35+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2019/03/22/rsac-2019-virtual-pen-testing-slides-available/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2019/03/img_4214.jpg</image:loc><image:title>IMG_4214</image:title></image:image><lastmod>2019-03-22T14:24:41+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2019/03/11/emerging-risk/</loc><lastmod>2019-03-09T20:06:12+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2019/03/05/icymi-interviewed-by-the-fair-institute/</loc><lastmod>2019-03-05T16:33:16+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2019/02/27/presenting-on-agent-based-risk-modeling-at-rsa-conference-next-week/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2019/02/rsa.jpg</image:loc><image:title>rsa</image:title></image:image><lastmod>2019-02-27T03:55:15+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/12/28/applied-risk-appetite/</loc><lastmod>2019-12-15T15:13:17+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/12/13/named-nsu-distinguished-alumni/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2018/12/nsu-0164.jpg</image:loc><image:title>NSU-0164</image:title></image:image><lastmod>2018-12-10T03:37:05+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/12/11/accepted-at-rsa-2019-virtual-pen-testing/</loc><lastmod>2018-12-10T00:20:35+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/12/10/issa-journal-the-future-of-itrm-will-be-quantified/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2018/12/screenshot-2018-12-09-at-7-02-16-pm.png</image:loc><image:title>Screenshot 2018-12-09 at 7.02.16 PM</image:title></image:image><lastmod>2018-12-10T00:07:18+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/11/14/icymi-digital-transformation/</loc><lastmod>2018-11-14T04:15:21+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/10/19/fair-institute-champion-award/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2018/10/jack-freund-fair-awards-jack-jones-mark-coderre.jpg</image:loc><image:title>Jack Freund FAIR Awards Jack Jones Mark Coderre</image:title></image:image><lastmod>2018-10-19T20:51:36+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/10/02/rsa-2018-presentation-video/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2018/09/screenshot-2018-09-19-at-8-48-36-am.png</image:loc><image:title>Screenshot 2018-09-19 at 8.48.36 AM</image:title></image:image><lastmod>2018-09-19T12:52:58+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/09/25/fair-conference-18-panel-getting-buy-in-for-a-quantitative-risk-management-program/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2018/09/fair-conf.jpg</image:loc><image:title>FAIR-conf</image:title></image:image><lastmod>2023-09-06T05:52:06+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/09/18/icymi-risk-management-and-the-paradox-of-common-sense/</loc><lastmod>2018-09-11T14:10:46+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/09/11/icymi-organizational-signals-for-changing-risk-appetite/</loc><lastmod>2018-09-11T13:59:31+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/05/08/icymi-cyber-risk-sentinels/</loc><lastmod>2018-07-30T04:14:32+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/07/30/icymi-concept-creep-why-cyber-risk-problems-never-get-solved/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2018/07/neighborhood-watch21-e1532923850187.jpg</image:loc><image:title>Neighborhood-Watch21</image:title></image:image><lastmod>2018-07-30T04:13:30+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/06/19/security-awareness-and-the-bystander-effect/</loc><lastmod>2018-06-19T16:17:32+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/06/18/using-risk-to-justify-security-strategy-and-spending/</loc><lastmod>2018-06-17T19:51:50+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/04/30/rsac18-wrap-up/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2018/04/2018-04-18_bookstore_093711.jpg</image:loc><image:title>2018-04-18_Bookstore_093711</image:title></image:image><lastmod>2018-04-30T19:15:55+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/04/24/isaca-global-achievement-award-winner/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2018/04/isaca1-e1524584498666.png</image:loc><image:title>ISACA</image:title></image:image><image:image><image:loc>https://riskdr.com/wp-content/uploads/2018/04/isaca.png</image:loc><image:title>ISACA</image:title></image:image><lastmod>2018-04-24T15:45:43+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/04/04/joined-risklens-as-professional-advisor/</loc><lastmod>2018-04-04T15:50:52+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/03/22/jack-and-jack-talk-risk-modeling-at-cyber-risk-na/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2018/03/jack-jack-crna-e1521744955513.jpg</image:loc><image:title>jack-jack-CRNA</image:title></image:image><lastmod>2018-03-22T19:00:13+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/03/21/interviewed-on-the-secs-new-cyber-risk-disclosure-guidance/</loc><lastmod>2018-03-20T20:25:03+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/03/20/cyber-risk-cassandras/</loc><lastmod>2018-03-18T04:57:42+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/02/22/new-book-fintech-growth-and-deregulation/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2018/02/mvimg_20180222_124648.jpg</image:loc><image:title>MVIMG_20180222_124648</image:title></image:image><lastmod>2018-02-22T18:22:23+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/01/25/speaking-at-cyber-risk-na/</loc><lastmod>2018-01-25T17:43:43+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/01/24/accepted-at-rsa-quant-risk-implementation/</loc><lastmod>2018-01-24T21:47:42+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2018/01/09/more-on-smart-contracts/</loc><lastmod>2018-01-09T19:46:54+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2017/12/27/lowest-common-risk-denominator/</loc><lastmod>2017-12-27T16:25:49+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2017/12/10/cyber-deterrence/</loc><lastmod>2017-12-27T16:18:37+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2017/12/12/smart-contracts/</loc><lastmod>2017-12-12T19:20:09+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2017/10/13/interesting-times/</loc><lastmod>2017-10-13T17:57:56+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2017/05/31/pure-risk/</loc><lastmod>2017-10-13T17:53:43+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2017/04/14/interviewed-on-the-juicebox-podcast/</loc><lastmod>2017-04-14T19:02:31+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2017/03/08/risk-and-regulation/</loc><lastmod>2017-03-08T05:51:16+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2017/03/04/article-on-cyber-risk-taxonomy-on-risk-net/</loc><lastmod>2017-03-04T05:38:36+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2016/12/28/in-defense-of-verbal-risk-labels/</loc><lastmod>2016-12-28T17:19:18+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2016/12/23/named-iapp-fellow/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2016/12/fip_cmyk_final-011.jpg</image:loc><image:title>fip_cmyk_final-011</image:title></image:image><lastmod>2016-12-23T22:02:32+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2016/12/15/interviewed-for-the-cyber-canon/</loc><lastmod>2016-12-16T03:20:46+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2016/11/22/oprisk-book-chapter-on-cyber-published/</loc><lastmod>2016-12-16T03:08:01+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2016/10/05/practicing-aikido-with-type-1/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2016/10/kanji-aikido.png</image:loc><image:title>kanji-aikido</image:title></image:image><lastmod>2016-10-06T02:21:02+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2016/10/04/speaking-at-siracon-2016/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2016/10/sira.png</image:loc><image:title>sira</image:title></image:image><lastmod>2016-10-05T02:28:39+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2016/10/04/speaking-at-the-inaugural-fair-conference/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2016/10/fair-institute.png</image:loc><image:title>fair-institute</image:title></image:image><lastmod>2016-10-04T18:00:36+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2016/10/03/speaking-at-uncc-cyber-security-summit/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2016/10/cyber16-title-update-edited.jpg</image:loc><image:title>cyber16-title-update-edited</image:title></image:image><lastmod>2016-10-04T03:54:08+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2016/09/21/the-risk-of-cyber-austerity/</loc><lastmod>2016-09-21T16:32:14+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2016/08/15/the-goth-kids-of-the-it-dept/</loc><lastmod>2016-08-15T04:50:50+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2015/04/20/risk-palimpsest/</loc><lastmod>2016-08-14T21:09:29+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2015/08/02/always-mistrust-new-risk-equations/</loc><lastmod>2016-08-14T21:08:54+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2015/09/30/zanshin-risk-management/</loc><lastmod>2016-08-14T21:08:16+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2015/10/07/security-project-triage-is-all-about-resource-allocation/</loc><lastmod>2016-08-14T21:07:44+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2015/12/11/why-i-work-in-risk/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2015/12/3634342405_56e404f3be.jpg</image:loc><image:title>3634342405_56e404f3be</image:title></image:image><lastmod>2016-08-14T21:07:13+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2015/12/18/schrodingers-christmas/</loc><lastmod>2016-08-14T21:06:41+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2015/12/30/risk-and-politics/</loc><lastmod>2016-08-14T21:06:10+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2016/02/08/risk-forecast-accuracy-feb-issa-journal/</loc><lastmod>2016-08-14T21:05:15+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2016/02/15/risk-forecast-accuracy-at-cyber-risk-na/</loc><lastmod>2016-08-14T21:04:37+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2016/06/01/redzone-podcast-about-risk-forecasting/</loc><lastmod>2016-08-14T21:03:53+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2016/03/09/cloudy-with-a-chance-of-risk/</loc><lastmod>2016-08-14T21:03:19+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2016/04/04/inducted-into-the-cybersecurity-canon/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2016/04/canon.png</image:loc><image:title>Canon</image:title></image:image><lastmod>2016-08-14T21:02:45+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2016/05/13/assessing-cyber-risk-quality-pt-1/</loc><lastmod>2016-08-14T21:02:17+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2016/05/18/assessing-cyber-risk-quality-pt-2/</loc><lastmod>2016-08-14T21:01:42+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2016/05/26/assessing-cyber-risk-quality-pt-3/</loc><lastmod>2016-08-14T21:01:16+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2016/06/15/the-dose-makes-the-poison/</loc><lastmod>2016-08-14T21:00:37+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2015/07/06/the-structural-engineer-saves-you-from-the-architect/</loc><lastmod>2016-01-03T18:33:58+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2015/07/15/the-tragedy-of-the-risk-commons/</loc><lastmod>2015-07-15T17:50:02+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2015/03/16/speaking-at-oprisk-north-america-2015/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2015/03/orna-logo.jpg</image:loc><image:title>ORNA logo</image:title></image:image><lastmod>2015-03-16T04:58:27+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2015/03/15/sira-webinar-on-fair-book/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2015/03/sira-logo-med.png</image:loc><image:title>sira-logo-med</image:title></image:image><lastmod>2015-03-15T16:47:06+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2015/03/02/using-economics-to-diagnose-security-model-failure/</loc><lastmod>2015-03-02T17:48:15+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2015/01/16/effective-approaches-to-bringing-the-pain-with-risk-management/</loc><lastmod>2015-01-16T05:50:41+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2014/12/28/risk-relativism-is-dangerous-science/</loc><lastmod>2014-12-30T19:19:45+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2014/12/30/best-information-security-book-of-2014/</loc><lastmod>2014-12-30T18:19:48+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2014/11/05/risk-work-is-stressful/</loc><lastmod>2015-02-24T05:15:41+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2014/10/08/devry-charlotte-2014-commencement-address/</loc><lastmod>2014-10-18T05:04:48+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2014/09/19/amish-approaches-to-risk-management/</loc><lastmod>2014-09-20T02:16:12+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2014/09/11/the-definitive-guide-to-fair-is-now-for-sale-everywhere/</loc><lastmod>2014-09-19T18:14:53+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2014/10/01/using-behavioral-interview-techniques-to-assess-supplier-security-posture/</loc><lastmod>2014-09-17T18:36:47+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2013/09/18/a-cooperative-model-for-security-audit-and-risk-a-collaborative-approach-to-risk-based-audits/</loc><lastmod>2014-09-17T18:23:43+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2014/09/03/jack-jones-post-on-justifying-security-spend/</loc><lastmod>2014-09-04T03:25:28+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2014/08/18/quick-book-update/</loc><lastmod>2014-08-18T17:30:59+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2014/07/16/book-preorder-available/</loc><lastmod>2014-07-18T02:58:13+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2014/07/16/real-risk/</loc><lastmod>2014-07-17T03:50:03+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2014/05/08/who-owns-loss-owns-risk/</loc><lastmod>2014-07-15T21:42:17+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2014/05/04/book-submitted/</loc><lastmod>2014-05-04T22:50:31+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2013/11/30/using-risk-to-take-the-high-road/</loc><lastmod>2014-03-06T05:20:43+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2014/02/05/book-cover-revealed/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2014/01/bookcover.png</image:loc><image:title>BookCover</image:title></image:image><lastmod>2014-01-31T03:59:58+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2014/01/30/the-yes-and-approach-to-it-risk-mgmt/</loc><lastmod>2014-01-31T03:48:02+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2013/10/02/new-journal-article-on-supplier-security-assessments/</loc><lastmod>2013-10-04T15:28:29+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2013/08/28/the-3-lines-of-defense-bad-lenses-in-good-frames/</loc><lastmod>2013-09-09T06:54:38+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2013/09/09/im-writing-a-book/</loc><lastmod>2013-09-12T17:19:27+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2013/07/10/open-group-podcast-on-risk-june-2013/</loc><lastmod>2013-07-10T17:42:34+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2013/06/07/most-likely-fined-like/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2013/06/hey-girl.jpg</image:loc><image:title>hey girl</image:title></image:image><lastmod>2013-06-07T05:36:08+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2013/06/05/risk-response-requires-critical-thinking/</loc><lastmod>2013-06-06T03:22:49+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2013/03/13/maturing-as-a-risk-professional/</loc><lastmod>2013-06-05T17:43:40+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2013/05/17/despite-all-my-rage/</loc><lastmod>2013-05-18T03:35:42+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2013/05/14/i-want-the-what-theyre-having/</loc><lastmod>2013-05-14T20:53:58+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2013/04/11/negligence-and-compliance/</loc><lastmod>2013-04-11T05:58:24+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2013/03/15/frequency-matters/</loc><lastmod>2013-03-15T21:06:23+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2013/02/23/high-accumulation/</loc><lastmod>2013-02-19T06:08:43+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2013/02/16/its-always-about-the-money/</loc><lastmod>2013-02-16T14:39:16+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2013/02/15/opengroup-risk-mgmt-podcast/</loc><lastmod>2013-02-15T15:30:00+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2013/02/09/substituting-risk-tolerances/</loc><lastmod>2013-02-10T05:48:44+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2013/02/02/private-sector-cyberwar-part-2/</loc><lastmod>2013-02-03T03:40:59+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2013/02/02/how-security-audit-and-risk-should-work-together/</loc><lastmod>2013-02-03T03:39:06+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2012/11/29/be-the-person-on-the-phone/</loc><lastmod>2013-01-24T17:51:08+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2012/08/21/security-is-an-empty-gun/</loc><lastmod>2012-08-21T05:38:43+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2012/07/22/id-like-the-medium-please/</loc><lastmod>2012-07-23T02:29:29+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2012/07/10/knuckle-busters/</loc><lastmod>2012-07-10T17:17:50+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2012/06/18/thus-wastes-man/</loc><image:image><image:loc>https://riskdr.com/wp-content/uploads/2012/06/funding1.jpg</image:loc><image:title>funding</image:title></image:image><image:image><image:loc>https://riskdr.com/wp-content/uploads/2012/06/funding.jpg</image:loc><image:title>funding</image:title></image:image><lastmod>2012-06-18T19:40:57+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2012/06/04/a-drink-after-work/</loc><lastmod>2012-06-04T13:59:10+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2012/05/18/private-sector-perspectives-on-cyberwar/</loc><lastmod>2012-05-29T13:28:42+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2012/05/18/pizza-sauce-and-security/</loc><lastmod>2012-05-21T02:47:51+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com/2012/05/13/how-to-play/</loc><lastmod>2012-05-21T02:43:25+00:00</lastmod><changefreq>monthly</changefreq></url><url><loc>https://riskdr.com</loc><changefreq>daily</changefreq><priority>1.0</priority><lastmod>2026-02-20T22:44:13+00:00</lastmod></url></urlset>
