Answer to the research question
The research question is how companies can link systematically their information security practice with their operational risk management strategy and practice to achieve superior benefits.
The answer, based on the reviewed literature, would be that the three necessary elements for organisations to obtain superior benefits are:
• The presence of a committed management (setting risk objectives and appetite). Reviewed literature and survey results show that this is the first necessary requirement.
• The development of a strong information security practice as part of a holistic ERM/ORM.
• The alignment of enterprise risk management with the business strategy. This study explains that making business is taking risks and survey results show the relation between strategic alignment in RM and benefits for the organisation.
Stakeholder value, new business opportunities and better governance are currently the most likely superior benefits to achieve according to surveyed experts.
Therefore, as Jean Noel Ezingeard states, "an integrated operational risk management approach seems to be the cornerstone of success and will deliver beyond the risk management functions".
Cyber Insurance Due Diligence
Cyber Insurance book by @itsecuriteer
Creating IT security teams
the book
Popular Posts
-
This post compiles my notes on three Papers on vulnerabilities in complex networks: - "Multiscale vulnerability of complex networks &q... -
This time the student notes I post are coming from the reading of a scientific paper written by Mark Newman , Professor of Physics in the Un... -
I am convinced that Information Security professionals can benefit from reading, not only Information Security books like this one or that ... -
In the introduction to the Data Science world, one needs to build the right frame surrounding the topic. This is usually done via a set of ... -
Belgium: Waffles... and security The professional activities that we undertake within our company, be it our own shop or our employer, can... -
An elegant way to sell security Every now and then we need to get a chance to slow down our professional tactical everyday pace and think ... -
In the introduction to the Data Science world, one needs to build the right frame surrounding the topic. This is usually done via a set of ... -
Social Psychology Professor Scott Plous mentioned a very enlightening almost 12-minute video on the " Science of Persuasion " by ... -
A valuable security research repository Every single week, somewhere in the world, a security conference or presentation takes place. Att... -
The book by James Surowiecki titled " The wisdom of crowds " fell into my hands and I read it during the summer of 2015. These ar...
Follow me on twitter!
