Security News > 2021 > December > Extracting value from the interconnected network of risk management

Extracting value from the interconnected network of risk management
2021-12-09 07:00

The network presents our best opportunity to understand the interactions which link our application of risk management strategy.

Step 2: Create a library of activities and associate it with every risk management initiative that touches the in-scope resources.

Step 3: Merge network-centric outputs with risk management activities related to the specific control.

Step 2: Merge network-centric outputs with risk management activities related to specific control.

Identifying how changes in the trusted entities associated with activity profiles impacts the threat model and their relevant risk areas is one example of understanding and contextualizing transitive risk.

Given a rich source of policy agnostic, network-derived data as presented by Zeek, the opportunity to coalesce around the network for decision-making across the risk management portfolio is ripe for the picking.


News URL

https://www.helpnetsecurity.com/2021/12/09/risk-management-approaches/