企业国家安全：量化网络风险作为国家防御的当务之急.pdf

1、Zach SchmidtChief Executive OfficerGluck.aiEnterprise FocusChris StoreyPresident and Founder Gluck.aiSMB FocusKellman MeghuPrincipal Security ArchitectDeepCoveCModeratorThe collective responsibilities and practices of corporations in safeguarding assets,information,and operations that are vital to a

2、 nations defense,economic stability,or public safety.Corporate National Security:Cyber Risk Quantification(CRQ)is the process of assigning measurable,numerical values,typically in monetary terms,to cyber risks facing an organization.Rather than categorizing risks qualitatively(like high,medium,or lo

3、w),CRQ aims to express potential cyber losses in dollars and probabilities.Cyber Risk Quantification:Top-10 Largest Canadian Enterprises$25,169,848,433Canadian Dollars at Risk(Major Cyber Event)GoodGreatVery BadBadNot GreatFinancial Impact by Threat CategoryExpected Loss Value$25,169,848,433 PII Bre

4、ach$9,709,964,198 Ransomware$10,552,808,014 IP Compromise$89,978,015 Digital Vandalism$733,805,292 Hacktivism$274,056,406 Digital Fraud$67,570,512 Denial of Service$30,820,122 Other$3,710,845,874“Is it Math or just a Mood Ring?”A Checklistq Proven Methodologyq Business Language Output q Data Integra

5、tion Capabilityq Scalability&Repeatabilityq Benchmarking Powerq Decision Supportq Insurance&Compliance Alignmentq Ease of Use&Communicationq Independence&Trustworthinessq Proven OutcomesCyber Resilience Speedrunning Use Cases Board and Management updates Merger&Acquisition analysis Cybersecurity Str

6、ategy&Budget Optimization Cybersecurity Program Benchmarking Cyber Insurance Planning Litigation Preparedness Audit Support Regulatory Compliance Digital Twin Report AI Risk ManagementActuarial Math:Actuarial Mathematicsis the specialized b