How deeply does Data-Driven Cybersecurity cover risk-based approach?

Defines risk-based prioritization and explains executive reporting, business risk assessments, and investment decisions without detailing a formal scoring method.

Risk-based approach

As explained in Data-Driven Cybersecurity

A decision-making approach that prioritizes cybersecurity actions and resources according to assessed risk and potential impact.

A risk-based approach aligns cybersecurity actions and investments with business goals by translating threats into financial and operational risks. It helps leaders prioritize security alongside other business risks and make decisions consistent with the organization’s risk appetite. section 5.2

Frame phishing in business terms

Instead of reporting only how many phishing attempts were blocked, show the potential financial effect of a successful attack and the return on investment of training that reduces employee susceptibility. section 5.2

How Data-Driven Cybersecurity covers it

liveBook manning.com

Read Data-Driven Cybersecurity on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Introduction to Generative AI, Second EditionA risk-based approach is a regulatory method that assigns requirements according to the potential severity and likelihood of harm from a system.
liveBook manning.com

The Art of AI Product DevelopmentRisk-aware decision making is the practice of evaluating potential consequences and applying stricter controls to high-stakes actions.

Compare how 3 books explain risk-based approach →

Related concepts

AI Actused by · The AI Act is a European Union regulation establishing harmonised, risk-based requirements for the development, placing on the market, and use of artificial intelligence systems.
guardrailuses · A guardrail is a constraint, safeguard, or control that limits actions or behavior to reduce risk and keep a system or process within acceptable bounds.
riskuses · Risk is the possibility and potential impact of an adverse outcome arising from uncertainty.
risk assessmentuses · Risk assessment is the systematic identification and evaluation of potential adverse events, including their likelihood and consequences, to determine their significance.

This explainer was generated by Manning's knowledge graph from the text of Data-Driven Cybersecurity. The section links point to the parts of the book it draws on.