Episode 29: Conceptualizing Reasonableness for Risk Analysis

In episode 29 of Cybersecurity Where You Are, co-hosts Tony Sager and Sean Atkinson are joined by Chris Cronin, ISO 27001 Auditor and Partner at HALOCK, a leading information security consultancy. Their discussion focuses on "reasonableness" as it relates to cybersecurity risk management. This topic isn't just about proving to regulators, litigators, and others that security controls were in place prior to an incident. It also considers how to implement safeguards without overburdening users and executives.

Resources

• Follow Chris Cronin on LinkedIn
• The Risk Conversation
• Manage Cybersecurity Risk with the CIS Controls
• Third-party Risk Management – Beyond the Questionnaire
• 3 Things You’ll Learn Conducting a Cyber Risk Assessment with CIS RAM