Back to All Events

Principle 1: Risk management

We will cover cyber risk management practices and appraising proposals for improving cyber risk governance:

  • Establising the scope and business criticality of your technology estate.

  • Aligning cyber risk management with a ERM framework.

  • Applying the Three Lines of Defence model to establishing cyber security accountability.

  • Assessing the impact and likelihood of a cyber incident.

  • Developing a risk appetite statement.

  • Approach to quantifying cyber risk.

  • Evaluating the transfer of cyber risk to an insurance.

  • Assessing if your suppliers meeting your security standards.

  • Overview of horizontally applicable UK regulations.



Next
Next
2 January

Principle 2: Strategy