Applying ERM Programs to Address Cyber Risks

This paper presents highlights and insights from the webinar’s panel discussion and is organized topically by the themes addressed during that panel. Panelists—experts in cyber risk management—concluded that much remains to be accomplished to adequately address cyber risks, and that integrating cyber risk management with operations and enterprise risk management is an important step in maturing the cyber capability.

Panelists noted that while leadership understands how to manage operational risks, cyber risk management professionals must be able to more effectively describe cyber risks to leadership in business language. Furthermore, they must understand how cyber risks fit within and can impact the organization’s broader mission and mission-support functions.