In this episode Allan interviews his friend Sameer Sait, former CISO at Amazon, Forcepoint and Arrow Electronics, who joins Allan for a discussion about WHY we measure risk.
 
 

It is about more than just asking for money. (And who are you actually asking money from? Hint: It is not the Board).
 
 

How does risk measurement change in the beginning of the CISO’s journey vs. later when the program is more mature?
 
 

What is the goal of good risk metrics? What is the role of cyber insurance in all this? What about business traction and cooperation with other department’s goals and objectives?
 
 

And finally, how does measuring risk affect disposition or risk?
 
 

Key Takeaways:
 
 

01:20 Sammer's bio
 

02:30 Asking for money - it's not from the Board
 

05:58 Measuring risk: inside-out vs. outside-in
 

11:20 Approaching management with an objective, not a story
 

12:38 Working with your team, as a team
 

14:12 The effects of measuring risk
 

18:36Analyzing the priorities and their consequences
 

24:36 Good governance vs. good management
 

26:22 Transference, remediation, and acceptance
 

30:57 What surprise Sameer in cybersecurity?
 
 

Links:
 
 

Learn more about Sameer on <a href='https://www.linkedin.com/in/sameersait/'>LinkedIn</a> 

Follow <a href='https://allanalford.com/'>Allan Alford</a> on <a href='https://linkedin.com/in/allanalford'>LinkedIn</a> and <a href='https://twitter.com/AllanAlfordinTX'>Twitter</a> 

Learn more about <a href='https://hackervalley.com/'>Hacker Valley Studio</a> and <a href='https://hackervalley.com/cyberranch'>The Cyber Ranch Podcast</a> 

Sponsored by our good friends at <a href='https://www.uptycs.com/'>Uptycs</a>

In this episode Allan interviews his friend Sameer Sait, former CISO at Amazon, Forcepoint and Arrow Electronics, who joins Allan for a discussion about WHY we measure risk.



It is about more than just asking for money. (And who are you actually asking money from? Hint: It is not the Board).



How does risk measurement change in the beginning of the CISO’s journey vs. later when the program is more mature?



What is the goal of good risk metrics? What is the role of cyber insurance in all this? What about business traction and cooperation with other department’s goals and objectives?



And finally, how does measuring risk affect disposition or risk?



Key Takeaways:



01:20 Sammer's bio


02:30 Asking for money - it's not from the Board


05:58 Measuring risk: inside-out vs. outside-in


11:20 Approaching management with an objective, not a story


12:38 Working with your team, as a team


14:12 The effects of measuring risk


18:36Analyzing the priorities and their consequences


24:36 Good governance vs. good management


26:22 Transference, remediation, and acceptance


30:57 What surprise Sameer in cybersecurity?



Links:



Learn more about Sameer on <a href='https://www.linkedin.com/in/sameersait/'>LinkedIn</a>

Follow <a href='https://allanalford.com/'>Allan Alford</a> on <a href='https://linkedin.com/in/allanalford'>LinkedIn</a> and <a href='https://twitter.com/AllanAlfordinTX'>Twitter</a>

Learn more about <a href='https://hackervalley.com/'>Hacker Valley Studio</a> and <a href='https://hackervalley.com/cyberranch'>The Cyber Ranch Podcast</a>

Sponsored by our good friends at <a href='https://www.uptycs.com/'>Uptycs</a>

In this episode Allan interviews his friend Sameer Sait, former CISO at Amazon, Forcepoint and Arrow Electronics, who joins Allan for a discussion about WHY we measure risk.

It is about more than just asking for money.  (And who are you actually ask...

In this episode Allan interviews his friend Sameer Sait, former CISO at Amazon, Forcepoint and Arrow Electronics, who joins Allan for a discussion about WHY we measure risk.

It is about more than just asking for money.  (And who are you actually asking money from?  Hint: It is not the Board).

How does risk measurement change in the beginning of the CISO’s journey vs. later when the program is more mature?

What is the goal of good risk metrics? What is the role of cyber insurance in all this? What about business traction and cooperation with other department’s goals and objectives?

And finally, how does measuring risk affect disposition or risk?

Key Takeaways:

01:20 Sammer's bio

02:30 Asking for money - it's not from the Board

05:58 Measuring risk: inside-out vs. outside-in

11:20 Approaching management with an objective, not a story

12:38 Working with your team, as a team

14:12 The effects of measuring risk

18:36Analyzing the priorities and their consequences

24:36 Good governance vs. good management

26:22 Transference, remediation, and acceptance

30:57 What surprise Sameer in cybersecurity?

Links:

Learn more about Sameer on LinkedIn
Follow Allan Alford on LinkedIn and Twitter
Learn more about Hacker Valley Studio and The Cyber Ranch Podcast
Sponsored by our good friends at Uptycs

WHY We Measure Risk w/ Sameer Sait

Apple

Google

Spotify

Amazon

Ride the cyber trails with one CISO (Allan Alford) and a diverse group of friends and experts who bring a human perspective to cybersecurity.