We’re often asked about the data sources behind our cyber risk research. We generally include these details in the appendix of our Information Risk Insights Studies (IRIS), but those only come around once or twice a year. Plus, we’re always looking to expand our cyber risk data sources and partners, so the list evolves over…
Our analysis of probability in the IRIS 2025 focused on the likelihood of experiencing at least one security incident within a year. It’s possible, of course, for organizations to suffer more than one loss event in that timeframe, and veteran IRIS readers may recall that prior studies included a table of probabilities for at least one, two, and three incidents in a 12-month period. Those readers may be disappointed upon realizing updated tables are missing from the latest IRIS. If that describes you, this should ease your disappointment.
Hey, you got multi-party incidents in my extreme events! You got extreme events in my multi-party incidents! Here at Cyentia, we love cooking up analysis of cyber incidents in the service of better risk decisions. We’ve explored multi-party incidents (Ripples Across the Risk Surface) and extreme events (IRIS Xtreme) before. It’s only natural to wonder…
Hey, you got multi-party incidents in my extreme events! You got extreme events in my multi-party incidents! Here at Cyentia, we love cooking up analysis of cyber incidents in the service of better risk decisions. We’ve explored multi-party incidents (Ripples Across the Risk Surface) and extreme events (IRIS Xtreme) before. It’s only natural to wonder…
One of the many lessons that COVID-19 has to offer information security practitioners is a fresh appreciation of the importance of supply chains and the pain that occurs when previously taken-for-granted connections are attacked. Last month we released Ripples Across the Risk Surface, our latest report in partnership with RiskRecon. In this report, we explore…
Earlier this week we held our first Cyentia-branded webinar covering the release of our IRIS 20/20 Xtreme publication and the key findings from that report. We were delighted to have Derek Vadala from Visible Risk join us. There was terrific engagement from the audience. If you missed out, have no fear! We have now posted…
Last week I participated in a webinar with Advisen and a panel of industry experts on estimating costs from breaches more accurately. Our focus was our recent IRIS 20/20 publication and the key findings from that report. Hundreds of attendees join the all too brief discussion and we didn’t have time to address all of…
UPDATE We found a sponsor for this study and research has begun. Thanks to all those who expressed interest in it. Don’t fret if you’d still like to partner with us on future research projects – there will be more opportunities! In mid March, the Cyentia Institute published the 2020 Information Risk Insights Study (IRIS…