"What is the probability of achieving our business goals given the cyber security risks and uncertainty?"

Executives are now demanding that cyber security performance is accountable, transparent and of business value.

A young businessman experiencing stress during a late night at work
"How much does the company need to reserve for these cyber security risks?"

"How much does the company need to reserve for these cyber security risks?"

"Which of the possible mitigations has the greatest effect on reducing the risk exposure?"

"Which of the possible mitigations has the greatest effect on reducing the risk exposure?"

"How fat is the tail of our cyber risk distribution and can it be insured against?"

"How fat is the tail of our cyber risk distribution and can it be insured against?"

"Which of our cyber risk assumptions are most volatile?"

"Which of our cyber risk assumptions are most volatile?"

"How are our cyber security risks correlated?"

"How are our cyber security risks correlated?"

"Does this project reduce or increase the overall corporate cyber risk exposure?"

"Does this project reduce or increase the overall corporate cyber risk exposure?"

"It is not our job to understand the value cyber security adds. It is your job to demonstrate it, to make it real every single day."