Risk Management for Cyber Security Managers - What Is Risk?

The video tutorial discusses various definitions of risk, including business and ISO perspectives. It delves into cybersecurity, highlighting vulnerabilities and threats. Two risk scenarios are presented: one involving email data loss due to server outages, and another concerning software failure from data corruption or faulty updates. The tutorial emphasizes reducing vulnerabilities and threats to manage risk effectively.

How does the ISO define risk in a business context?

• As the disruption of business functions

• As the potential loss of assets

• As the likelihood of a threat exploiting a vulnerability

• As the effect of uncertainty on objectives

In cybersecurity, what does a vulnerability refer to?

• A loss of data

• A potential threat from malware

• A weakness in a security system

• An employee error

What is a primary goal of a cyber risk manager?

• To focus solely on software updates

• To increase the number of threats

• To reduce vulnerabilities and threats

• To maximize business disruptions

What could cause the loss of an email server?

• A software update

• An increase in email traffic

• A server outage by the hosting service

• A reliable hosting service

How can a company reduce the risk of software failure?

• By using unreliable software

• By ensuring proper patching and updates

• By avoiding any software changes

• By ignoring software updates