The Cyentia Institute’s Information Risk Insights Study (IRIS) series is dedicated to clearing away the fog of FUD (fear, uncertainty, and doubt) surrounding cyber risk management. Every IRIS combines a massive dataset of 100,000+ historical security incidents with rigorous analysis to help managers make more informed risk decisions. The series is widely regarded in the industry, with over 65,000 downloads to date.
In late 2020, the Cyentia Institute published the special “Xtreme Edition” of the IRIS, which offered in-depth analysis of the 100 largest cyber loss events of the prior five years. People have been asking for an updated IRIS Xtreme, so we’re excited to announce that we’re gonna make that happen…with your help.
What will we do?
The first IRIS Xtreme involved a huge amount of manual research and data collection on each incident. We plan to expand the scope of what constitutes an “extreme event” and dig even deeper this time around. In short, we’ll investigate incidents that meet the following criteria:
- Meet or exceed the 95th percentile for reported financial losses
- Meet or exceed the 99th percentile for data records compromised
- Massive multi-party events that impacted large numbers of other organizations in the supply chain
- Incidents disclosed per the SEC 8-K form 1.05 for material cyber events
For each event, we’ll seek to gather the following details:
- Timelines for discovery and disclosure
- Threat actors involved
- Tactics, techniques, and procedures used
- IT and data assets affected
- Business and financial impacts
- How the org responded to the incident
How can you sponsor?
We have sponsorship tiers ranging from $5,000 to $25,000 (limited) for the 2025 IRIS Xtreme. We’d be happy to tell you more about what benefits are included at each level and how you can get involved. Register your interest using this form, and we’ll get back to you quickly!
Why should you sponsor?
The Cyentia Institute is a widely-respected research and data science firm working to advance cybersecurity knowledge and practice. We can’t accomplish that mission without financial support from the many product and service providers, government agencies, and other entities that provide financial support for our research. It’s a win-win partnership!
When your organization commissions or sponsors Cyentia research, you’re helping to deliver valuable, data-driven content to your target audience and the cybersecurity community at large. And since we don’t produce fluff pieces, our content is far more credible and useful than most of what’s out there. It gets attention and gains appreciation that carries over to the organizations (like yours!) that made it possible. Here’s that sponsor interest form again.
We’ll leave you with a sampling of reader comments to help convince you that there’s an eager audience of cyber risk and security professionals who would be grateful if you help us extend the IRIS series.
Leave a Reply
Want to join the discussion?Feel free to contribute!