CERT: A Taxonomy of Operational Risks for Cybersecurity

From:  Carnegie Mellon University

Julia Allen: Welcome to CERT’s Podcast Series: Security for Business Leaders. The CERT Division is part of the Software Engineering Institute. We are a federally funded research and development center at Carnegie Mellon University in Pittsburgh, Pennsylvania. You can find out more about us at cert.org.

Show notes for today’s conversation are available at our podcast website.

My name is Julia Allen. I’m a principal researcher at CERT working on operational resilience. I’m very pleased today to welcome back Jim Cebula. Jim is the Technical Manager of CERT’s Cybersecurity Risk Management Team, of which I am a member.

And today, Jim and I will be discussing a taxonomy for managing operational cybersecurity risk. This is an update of a report that he and his colleague Lisa Young published back in 2010 reflecting things that we’ve learned since that time. And in addition to the two risk taxonomy reports, for our listeners’ benefit, if you wish you can get some additional background on our work and related topics in operational risk and resilience in our podcast series.

Read Complete Transcript

Facebooktwittergoogle_plusredditpinterestlinkedinmail

Leave a Reply

Your email address will not be published.

Please Answer: *