“That’s the news from Lake Wobegon, where all the women are strong, all the men are good-looking, and all the children are above average.” – A Prairie Home Companion We have harped on the inadequacy of a single “average cost per record” value (and averages more generally) when analyzing cybersecurity event losses several times before,…
Our analysis of probability in the IRIS 2025 focused on the likelihood of experiencing at least one security incident within a year. It’s possible, of course, for organizations to suffer more than one loss event in that timeframe, and veteran IRIS readers may recall that prior studies included a table of probabilities for at least one, two, and three incidents in a 12-month period. Those readers may be disappointed upon realizing updated tables are missing from the latest IRIS. If that describes you, this should ease your disappointment.
As much as it feels like 2021 was just 12 extra months tacked onto 2020, there are some cornerstones that I rely on to remind me that 2021 was in fact its very own distinct year. For starters, the Harry Potter and Lord of the Rings film franchises both turned 20 (2001 was a dreamboat…
Hey, you got multi-party incidents in my extreme events! You got extreme events in my multi-party incidents! Here at Cyentia, we love cooking up analysis of cyber incidents in the service of better risk decisions. We’ve explored multi-party incidents (Ripples Across the Risk Surface) and extreme events (IRIS Xtreme) before. It’s only natural to wonder…
Hey, you got multi-party incidents in my extreme events! You got extreme events in my multi-party incidents! Here at Cyentia, we love cooking up analysis of cyber incidents in the service of better risk decisions. We’ve explored multi-party incidents (Ripples Across the Risk Surface) and extreme events (IRIS Xtreme) before. It’s only natural to wonder…
One of the many lessons that COVID-19 has to offer information security practitioners is a fresh appreciation of the importance of supply chains and the pain that occurs when previously taken-for-granted connections are attacked. Last month we released Ripples Across the Risk Surface, our latest report in partnership with RiskRecon. In this report, we explore…
Earlier this week we held our first Cyentia-branded webinar covering the release of our IRIS 20/20 Xtreme publication and the key findings from that report. We were delighted to have Derek Vadala from Visible Risk join us. There was terrific engagement from the audience. If you missed out, have no fear! We have now posted…
Last week I participated in a webinar with Advisen and a panel of industry experts on estimating costs from breaches more accurately. Our focus was our recent IRIS 20/20 publication and the key findings from that report. Hundreds of attendees join the all too brief discussion and we didn’t have time to address all of…
UPDATE We found a sponsor for this study and research has begun. Thanks to all those who expressed interest in it. Don’t fret if you’d still like to partner with us on future research projects – there will be more opportunities! In mid March, the Cyentia Institute published the 2020 Information Risk Insights Study (IRIS…