by Bob Chaput | May 31, 2026 | Defensible Risk Assessment, Governance, Strategy, and Alignment, Regulations, Legal Cases, and Increasing Liability
Introduction Recently wrapping up our latest Healthcare Enterprise Cyber Risk Management course at The University of Texas at Austin, I have been thinking and writing about a problem I now call Defensible Risk Assessment. Our Capstone Project requires students to...
by Bob Chaput | Mar 7, 2025 | Board and CISO Interaction – Best Practices, Costs of Cyber Attacks and Data Breaches, Governance, Strategy, and Alignment, Regulations, Legal Cases, and Increasing Liability
Introduction As my readers know, I have an affinity for risk analysis and risk management, which I often pose in the form of this question: How will you make informed, intelligent decisions about what safeguards you should invest in and implement until you understand...
by Bob Chaput | Jan 27, 2025 | Board and CISO Interaction – Best Practices, Costs of Cyber Attacks and Data Breaches, Governance, Strategy, and Alignment, Regulations, Legal Cases, and Increasing Liability
“As the world is increasingly interconnected, everyone shares the responsibility of securing cyberspace.” ― Newton Lee “And it starts with C-suite and board accountability.” ― Bob Chaput Introduction In today’s rapidly evolving digital landscape, enterprise cyber risk...
by Bob Chaput | Jan 13, 2025 | Board and CISO Interaction – Best Practices, Costs of Cyber Attacks and Data Breaches, Governance, Strategy, and Alignment, Regulations, Legal Cases, and Increasing Liability
ignment of business strategy and risk appetite should minimize the firm’s exposure to large and unexpected losses. In addition, the firm’s risk management capabilities need to be commensurate with the risks it expects to take. —Jerome Powell Introduction...
by Bob Chaput | Nov 5, 2024 | Governance, Strategy, and Alignment, Regulations, Legal Cases, and Increasing Liability
Alignment of business strategy and risk appetite should minimize the firm’s exposure to large and unexpected losses. In addition, the firm’s risk management capabilities need to be commensurate with the risks it expects to take. —Jerome Powell Introduction In today’s...
by Bob Chaput | Oct 21, 2024 | Governance, Strategy, and Alignment, Regulations, Legal Cases, and Increasing Liability
So difficult it is to show the various meanings and imperfections of words when we have nothing else but words to do it with. —John Locke Introduction In today’s rapidly evolving digital landscape, I cannot overstate the importance of robust enterprise cyber risk...