When a robot gives better estimates than a human

When a robot gives better estimates than a human

For organisations with many (several hundred) systems, quantitative IT risk management can be likened to a window cleaner being asked to clean the United Nations headquarters in New York. He will never finish before the first couple of windows need cleaning again. The...
The organisation’s dripping faucets

The organisation’s dripping faucets

A clear agenda for the organization is: “Understand and reduce the risk of cyber-attacks”. The management and the board have gradually joined the agenda and understand that we are dealing with a risk that they must deal with. We estimate that cyber can...
Risk appetite – Why and how to determine it?

Risk appetite – Why and how to determine it?

A skilled offshore engineer with whom I collaborated gave me a very concrete example of the application of risk appetite. The height of a drilling platform is set according to legislation and standards but also according to the company’s risk appetite. How big a...