Future of Threat Intelligence

Black Kite’s Jeffrey Wheatman on How Cybersecurity Is Not A Technical Problem But A Business Problem (Black Hat Edition)

Listen Later

In our latest special episode of the Future of Threat Intelligence podcast, recorded at the Black Hat conference, we caught up with Jeffrey Wheatman, SVP, Cyber Risk Strategist at Black Kite. Jeffrey highlights the importance of aligning cybersecurity strategies with business objectives and understanding risk appetite. 

 

He emphasizes the need for scenario planning to help decision-makers visualize potential risks and their impacts. Jeffrey also discusses the evolving landscape of cyber risk quantification, highlighting how improved communication of technology value can facilitate better business decisions. 

 

Topics discussed:

  • Understanding risk appetite is crucial for organizations to align cybersecurity strategies with overall business objectives and decision-making processes.  
  • Scenario planning enables decision-makers to visualize potential risks, fostering informed discussions about risk management and mitigation strategies.  
  • Cyber risk quantification is evolving, allowing organizations to better assess and communicate the impact of cybersecurity measures on business performance.  
  • Engaging with business leaders helps cybersecurity professionals understand what keeps them awake at night and prioritize risk management efforts.  
  • Regular assessments of vendor cybersecurity postures can help organizations manage risk more effectively and ensure compliance with their risk appetite.  
  • Building causal linkages between cybersecurity actions and business outcomes enhances the understanding of risk impact on organizational goals.  
  • Cybersecurity is fundamentally a business problem, requiring collaboration between technical teams and business leaders to limit risk exposure.   

    •  

    Key Takeaways: 

    • Define your organization's risk appetite to align cybersecurity strategies with business goals and facilitate informed decision-making.  
  • Implement scenario planning exercises to visualize potential risks and their impacts on business processes and objectives.  
  • Utilize cyber risk quantification tools to measure and communicate the business impact of cybersecurity investments and decisions.  
  • Establish a framework for causal linkages between cybersecurity actions and business outcomes to enhance risk management discussions.  
  • Facilitate tabletop exercises with decision-makers to simulate risk scenarios and improve organizational preparedness for potential cyber incidents.  
  • Gather data from vulnerability scans and security reports to support risk appetite discussions and inform risk management strategies.  
  • Promote a culture of collaboration between technical teams and business leaders to ensure cybersecurity is viewed as a business priority.   

    • If you’re interested in Team Cymru’s latest research, download our “Voice of a Threat Hunter 2024” report here: https://www.team-cymru.com/voth2.0 

    ...more
    View all episodesView all episodes
    Download on the App Store
    Future of Threat IntelligenceBy Team Cymru
    • 4.5
    • 4.5
    • 4.5
    • 4.5
    • 4.5

    4.5

    11 ratings

    More shows like Future of Threat Intelligence

    View all
    Global News Podcast by BBC World Service

    Global News Podcast

    7,710 Listeners

    WSJ What’s News by The Wall Street Journal

    WSJ What’s News

    4,357 Listeners

    WSJ Tech News Briefing by The Wall Street Journal

    WSJ Tech News Briefing

    1,637 Listeners

    SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

    SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

    637 Listeners

    CyberWire Daily by N2K Networks

    CyberWire Daily

    1,023 Listeners

    The Daily by The New York Times

    The Daily

    112,427 Listeners

    Click Here by Recorded Future News

    Click Here

    415 Listeners

    Darknet Diaries by Jack Rhysider

    Darknet Diaries

    8,013 Listeners

    Talkin' About [Infosec] News, Powered by Black Hills Information Security by Black Hills Information Security

    Talkin' About [Infosec] News, Powered by Black Hills Information Security

    94 Listeners

    True Spies: Espionage | Investigation | Crime | Murder | Detective | Politics by SPYSCAPE

    True Spies: Espionage | Investigation | Crime | Murder | Detective | Politics

    1,963 Listeners

    Cyber Security Headlines by CISO Series

    Cyber Security Headlines

    137 Listeners

    Security Matters by CyberArk

    Security Matters

    22 Listeners

    Bloomberg Tech by Bloomberg

    Bloomberg Tech

    60 Listeners

    Microsoft Threat Intelligence Podcast by Microsoft

    Microsoft Threat Intelligence Podcast

    22 Listeners

    Better Offline by Cool Zone Media and iHeartPodcasts

    Better Offline

    548 Listeners