Safety in Numbers: Toward a New Methodology for Quantifying Cyber Risk

Sidhartha Dash () and Peyman Mestchian ()
Additional contact information
Sidhartha Dash: Chartis Research, Postal: Haymarket House, 28-29 Haymarket, London SW1Y 4RX, United Kingdom, http://www.chartis-research.com/
Peyman Mestchian: Chartis Research, Postal: Haymarket House, 28-29 Haymarket, London SW1Y 4RX, United Kingdom, http://www.chartis-research.com/

Journal of Financial Transformation, 2016, vol. 44, 39-44

Abstract: For financial institutions, safeguarding against cyber attack is now about more than just protection – increasingly it means managing cyber risk effectively across the organization. In modern, diffuse networks, such as those in most large banks, allocating risk across multiple network nodes (defined here as IT infrastructure, assets, and points of access) is vital to developing comprehensive strategies for managing cyber risk. Central to this is quantifying the risk. We believe that current scoring and statistically oriented models for cyber risk quantification are based on flawed assumptions, and fail to answer several key questions. We propose a methodology for quantifying cyber risk that incorporates the physical network in the organization, and the behavior and characteristics of individuals and processes in that network – including the actions they take to mitigate cyber risks. In addition, as allocating and attributing risk are central to modifying the behavior of institutions and individuals, enabling organizations to easily attribute and allocate risk to specific nodes and edges of the network is central to our method. This paper provides a high-level summary of the approach, and highlights how it differs from, and improves on, existing models of cyber risk quantification.

Keywords: Cyber; risk; quantifying; Bayesian; new; methodology; finance; institutions (search for similar items in EconPapers)
JEL-codes: C11 D22 L20 O00 (search for similar items in EconPapers)
Date: 2016
References: Add references at CitEc
Citations:

There are no downloads for this item, see the EconPapers FAQ for hints about obtaining it.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:ris:jofitr:1579

Access Statistics for this article

Journal of Financial Transformation is currently edited by Prof. Shahin Shojai

More articles in Journal of Financial Transformation from Capco Institute 77 Water Street, 10th Floor, New York NY 10005.
Bibliographic data for series maintained by Prof. Shahin Shojai ( this e-mail address is bad, please contact ).