Towards Real World Cyber Risk (Panel)

Panelists: Eireann Leverett (Airbus, UK), Matilda Rhode (Airbus, UK), Sasha Romanovsky (RAND, US), Jay Jacobs (Cyentia, US), Luca Allodi (Eindhoven University of Technology, NL)

A probabilistic approach to risk management for vulnerabilities can be assembled from some good work that has been done in recent years. We would like to give that grander vision of a risk based methodology for vulnerability management through a panel format giving the researchers time to describe their own work, and put the pieces together into a grander equation in front of an audience. This will give any vulnerability manager a new perspective on how to prioritise vulnerabilities for remediation, and how to measure the efficacy of their program of patching. It will allow a variety of strategies to be rapidly evaluated for patch rollout, before doing so. The seasoned cyber risk manager will find new ideas and tools with which to evaluate their teams performance, and to communicate to the board remaining cyber risk.

Three academic papers will be presented by their authors, and their relationship to each other discussed. Questions will be taken by the panel at the end, to elaborate on ideas, and show practical outcomes.