axio - kn

 

In today’s thoroughly digital world, technology decisions are business decisions, with cybersecurity standing out as a crucial area where this dynamic unfolds. It’s no longer just a box for IT to check—it’s a board-level priority. Increasing regulatory scrutiny, combined with evolving threats, places immense pressure on Chief Information Security Officers (CISOs) and their teams to manage risk effectively and defend key business decisions. One crucial tool that can help enterprises meet these challenges is a System of Record (SOR) for cybersecurity.

Cyber insurance is increasingly vital for water utilities as they face the growing threat of cyberattacks. In a recent article, published in JournalAWWA and co-authored with Monica Tigleanu, Cyber Strategy Director at the BMS Group, we outline a framework to evaluate insurance needs by categorizing potential impacts into financial and tangible consequences. This framework guides utilities in identifying risks, analyzing current coverage, and working with brokers to secure adequate protection.

It’s been an exciting journey to become a leader in the Forrester Wave: Cyber Risk Quantification Report

My recent blog post, How to Relieve FAIR Fatigue, generated some intense interest from within the cyber risk community. I received several comments from colleagues who agreed with my post’s central thesis. Namely, that many risk practitioners have voiced frustration with FAIR and their experiences with the CRQ vendors who preach its gospel. But I also received some pushback. Jack Jones, President of the FAIR Institute, took umbrage with my post. You can read his commentary here.

Decisions around cybersecurity spending are one of the top challenges facing business leaders as cyber-attacks grow in both scale and frequency. Even the best security tools and unlimited funds cannot guarantee protection from hackers, and the need for cyber resilience continues to climb. In the current threat environment, split-second decisions can be the difference between a business surviving and a business shutting down, and many organizations have turned to cyber risk quantification (CRQ) to measure and act within their cyber risk landscape.

I was proud to attend and participate in this year’s S4 event in Miami, Florida: The Future of OT and ICS Security. S4 is the largest gathering of ICS security talent in the world. This year’s event was held at The Fillmore, Miami Beach, from April 19-21. It was 3 days, 3 stages, and 64 speaker sessions. There were over 800 attendees from 30 countries and included a record 164 women! The conference was not only a mind meld of the industry’s best, but an ideal opportunity for me to make new friends and reconnect with many of our colleagues and partners.

On Saturday, May 8th 2021, 45% of the United States east coast fuel supply was suddenly shut down. A dramatic visual of the states affected is presented below.