Mahmoud Hani Rashad

I would like to introduce a risk calculation approach that reflects Resilience and Incident Response which will look something like
Risk = Impact * Resilience * Incident Response. For IT this is especially applicable as when assessing a risk you must be able to determine what the impact this risk will have to the organization, is the IT…[Read more]

The answer to your question Edward, in my opinion and from my so far brief venture in to Op Risk from Info Sec, is a clear yes. Insurance is a valid risk treatment in certain circumstances, but I dont believe Cyber Risk is one of them, not entirely anyway. And, you need to know precisely the ‘nitty gritty’ of insurance cover, too many…[Read more]

The stakes are rapidly rising in cyber crime. The worst of the Bad Guys are going industrial to achieve much worse than website DoS or theft of customer data for the black market. Firms are struggling to achieve insurance for even a fraction of the cyber exposure they have (FT 19/2/15). Do we as Op Risk Mgrs need to up our game by a step change…[Read more]