Cyber Risk Quantification Too “Rosy”? We Respond to Harvard Business Review
In a Harvard Business Review article “Cyber Risk Is Growing. Here’s How Companies Can Keep Up,” former Homeland Security Secretary Michael Chertoff makes some on-target points about the need to improve cyber risk management – but also writes skeptically about the “trend toward quantifying financial impacts of cyber risk through models like Value at Risk” that “depending on what data drives these models, can present an overly rosy view of risk.”