45th World Economic Forum
New Framework to Help Companies Calculate Risk of Cyberattacks
RiskNET [Editor-in-chief]30.01.2015, 11:47
The World Economic Forum and its partners have developed a new way for organizations to calculate the impact of cyberthreats. The framework, called "cyber value-at-risk" comes at a time when cyberattacks are increasing in velocity and intensity, and when 90% of companies worldwide recognize they are insufficiently prepared to protect themselves against them.
"Continuous cyberattacks on global organizations are showing that we are at a crossroads," said Alan Marcus, Senior Director of the Information and Communication Technology Industries at the World Economic Forum. "The same technologies many organizations have become so dependent on can also threaten their very core. This is why we are launching a Future of the Internet initiative in Davos, including this critical cyber value-at-risk framework."
The proposed framework is part of a new report, Partnering for Cyber Resilience: Towards the Quantification of Cyber Threats, which was created in collaboration with Deloitte and with the input of 50 leading organizations from around the world. The report will be discussed at a session during the World Economic Forum Annual Meeting 2015.
The purpose of the cyber value-at-risk approach is to help organizations make better decisions about investments in cybersecurity, develop comprehensive risk management strategies, and help stimulate the development of global risk transfer markets. The framework helps organizations address questions such as how vulnerable they are to cyberthreats, how valuable the key assets at stake are, and who might be targeting them.
The framework requires organizations to understand key cyber-risks and the dependencies between them. It will also help them establish how much of their value they could protect if they were victims of a data breach and for how long they can ensure their cyber protection.
Jacques Buith, Managing Partner at Deloitte Risk Services, said: "We need to be able to quantify cyber-risks if proper cyber-resilience assurance is to be achieved. Only then will management boards be able to take sound risk/reward decisions in this volatile world and thus secure their organizations’ cyber-resilience. We are proud to have been given the opportunity to work alongside the World Economic Forum on a framework to quantify cyber-risks. The World Economic Forum’s network enables as many organizations as possible to use these insights to protect their organizations against cyberattacks and provide for a safer digital world."
According to Mark Rutte, the Prime Minister of the Netherlands "the internet has become a key strategic resource for citizens, companies and governments alike. In order to fully realize its enormous potential for growth and innovation, governments and the private sector need to work together to ensure it remains free, open and secure. The Netherlands is a leader in the field of internet access, use of email, social media and mobile data. At the Global Conference on Cyber Space on 16/17 April in The Hague, we will discuss the challenges ahead with all the major stakeholders, from the public and the private sector. Partnering for Cyber Resilience, which has a strong track record in strengthening resilience to cyberthreats, is among these partners."
TK Kurien, Chief Executive Officer of Wipro, said: "As part of the Partnering for Cyber Resilience initiative, we have been working together with members of the initiative to advance the cyber value-at-risk estimation. At Wipro, for example, we developed a model that has helped us build a more structured view of our risk profile and make more fact-based investments and policy decisions. We are also in active engagement with our customer boards and management to help them better appreciate risks and to transform their security profile. We hope this approach will serve other organizations as they develop their cyber-resilience strategies."
Kommentare zu diesem Beitrag
Future Outlook and Emerging Risks
RiskNET [Editor-in-chief]07.06.2018, 10:47
Artificial Intelligence (AI) refers to the ability of a computer program to think and learn like a human and its snowballing impact on society is undeniable. AI applications already pervade many...
Tensions and Turbulence Ahead
RiskNET [Editor-in-chief]14.05.2018, 09:59
In 2017, the global political risk landscape was turbulent, and is likely to remain so over the next 12 months. The Political Risk Map 2018, published by Marsh and based on BMI Research findings,...
Decision making in risk management
RiskNET [Editor-in-chief]29.03.2018, 14:10
Our world is in a state of upheaval – whether due to war and terrorism, the increasing number of environmental disasters or because of cyber risks and economic distortions. The risk map is growing as...
Compliance index model
RiskNET [Editor-in-chief]23.03.2018, 13:54
Compliance measures result in costs but do they also have a benefit? It's difficult to assess the success of measures. It tends to arise – if at all – after a delay and the contribution made to...