Safeguarding the security and privacy of sensitive customer data has become a business critical requirement. Unfortunately, most struggle to effectively prioritize among the myriad cyber risks and to make a persuasive business case for mitigation, due to an inability to quantify cyber risks and a lack of a value-based ERM approach to cyber risk management. (more…)