Need For An Effective Cyber-Security Risk Management Framework

Mark Bernard, Author of the NIST Cyber-Security Foundation, Canada participates in Risk Roundup to discuss the Need for an Effective Cyber-Security Risk...

Mark Bernard, Author of the NIST Cyber-Security Foundation, Canada participates in Risk Roundup to discuss the Need for an Effective Cyber-Security Risk Management Framework.

Need for an Effective Cyber-Security Risk Management Framework

The rapid advances in cyberspace are bringing complex, chaotic, and challenging times for each nation: its government, industries, organizations, and academia (NGIOA) in cyberspace, geospace, and space (CGS).

As cyberspace is getting deeply embedded across each component of a nation: that is its government, industries, organizations, and academia, its crowded interconnections within and across NGIOA in CGS are catching nations off guard.

These interconnections and interdependencies raise an important question, on whether our current risk management framework, tools, technologies, and processes are effective in managing the security risks within and across nations’ geographical boundaries in cyberspace, geospace, and space.

How can we visualize and understand the complexity of cyberspace and its interconnections? In simple terms, cyberspace can be visualized as a neural network of a human brain—that runs through all the components of a nation, enabling them to connect, communicate, collaborate, and function. Each connection and its interconnectedness and interdependencies within and across the CGS network brings its own security challenges. Managing the security risks of this complex digital neural network is vital for each NGIOA.

The independent and interdependent cyberspace, geospace, and space bring each individual and entity across NGIOA risks and risks are inevitable. So what are these risks and how do we identify, understand, evaluate and manage them? It is time to discuss the need for an effective cyber-security risk management framework.

For more please watch the Risk Roundup Webcast or hear the Risk Roundup Podcast