As most people in our profession prepare for the annual trek to Las Vegas, 3/4ths of us on the Risk Science podcast are not.  In this episode, Ally, Alex, Chris and Jay discuss Ally’s experience at the WEIS conference (http://weis2014.econinfosec.org/) then slide into the NIST Cyber Security Framework (again), and tackle a few listener questions.

Episode 15: Not in Vegas

With the recent release of the Verizon Data Breach Investigations Report (DBIR) we invited Wade Baker, the godfather of the DBIR, onto the podcast.  Alex and Allison were able to ask questions of Wade and Jay about the DBIR. We wrap things up talking about Allison’s paper being accepted at WEIS.

Episode 14: Talking DBIR

Alex, Chris, Allison and Jay are back at it.  Discussing the take-aways they had from RSA and other goings-on and touch on data analysis, information sharing and we manage to get Allison going on PCI and her blog post at http://www.allymiller.info/blog/risk/2014/03/516/

Episode 13: Normally Distributed

The whole crew is together again to continue the discussion from Episode 11 about the early stages of a risk management program.  We also pull in a question from a listener about setting capacity, appetite and limits.   Chris introduces us to the “Advanced Measurement Approach” at http://www.fdic.gov/regulations/laws/publiccomments/basel/oprisk.pdf

Episode 12: From Crawling to Baby Steps