In this episode I have a co-host, Anthony Coggins, join me to talk with Steve Tobias about the first steps to take in building a Risk Management program.  Anthony is the Security Architect for Acrisure and Steve is one of the Lead Risk Analysts for Spectrum Health.

Talking Points:

Looking at Risk Management through the eyes of a brand new startup company we discuss:

• What is the first thing you should do?
• Awareness of understanding your risk posture 
  • Do it internal or hire a partner company? 
• What documents do you need to start off with?
• What are your security 'requirements' you need to discover?

Risk Management Resource Links:

Why CISOs must be students of the business | CSO Online

5 rules for a healthy CIO-CISO relationship | The Enterprisers Project

Small Business Cybersecurity Corner | NIST  - great resource to get started – free

Planning Guides | NIST

Stay safe from cybersecurity threats (sba.gov) – great resource to get started – free

DHS SMB Road Map 07-27-18 (cisa.gov)

Tips | CISA