SANS ISC: Financial Management of Cyber Risk - SANS Internet Storm Center

• SANS Site Network
  • Current Site
  • Internet Storm Center
  • Other SANS Sites Help
  • Graduate Degree Programs
  • Security Training
  • Security Certification
  • Security Awareness Training
  • Penetration Testing
  • Industrial Control Systems
  • Cyber Defense Foundations
  • DFIR
  • Software Security
  • Government OnSite Training

SANS ISC InfoSec Forums

Last Wednesday an interesting report was released called "The Financial Management of Cyber Risk: An Implementation Framework for CFOs".  Please take advantage of this new document that the Internet Security Alliance (ISA) and the American National Standards Institute (ANSI) have graciously provided.  The PDF guide is free for download, after registering, on the ANSI web site.  The document assists in assigning dollar amounts to the possible cyber risks and is further designed to place cyber attack mitigation on the C-level function. 

The report is endorsed by Melissa Hathaway, former Acting Senior Director for Cyberspace for the National Security Council.  The CFO guide is a direct response to the Cyberspace Policy Review released last May.   That report stated, "Between 2008 and 2009, American business losses due to cyberattacks grew to more than $1 trillion in intellectual property."  Copies of the documents from the Fed review can be found on the White House website.  (http://www.whitehouse.gov/cyberreview/documents)

Just another opportunity to educate your management staff on the possible financial repercussions of cyber attacks.   

Happy Easter!

Mari Nichols -  Handler on Duty