The Risk Science Podcast

Episode 21: We catch up once again this the risk nerds.  Alex, Ally, Chris and Jay talk about various goings on and Alex and Chris geek out over Lines of Defense. Episode 21: Lines of Defense  

Episode 20: Ally, Chris and Jay talk about various goings on, discussing stats class and sample sizes, enterprise risk management and communicating complexity. [audio https://risksciencepodcast.files.wordpress.com/2015/06/episode-20_-catching-up.mp3%5D Episode 2o: Catching up  

We got the gang back together for a quick discussion of RSA 2015 which is a week away.  We run through where we will speaking and the general goings-on expected of the week. Episode 19: RSA Bound  

The whole gang is together again and we talk about SIRACon exceeding our expectations.  Ally talks about a question from ISC2 discussions, Alex goes all Demming in Vienna and Chris kicks off a retrospective discussion of 2014. Episode 18: SIRACon Wrap Up  

We discuss cyber insurance and SIRACon Episode 17: Insuring the Cybers  

With the whole gang together again, we cover SIRACon and the all-star line up of speakers and slide into talking about who the superheroes of risk would be and wrap it up talking about Allison running for the ISC2 board. Episode 16: Superheroes of Risk  

As most people in our profession prepare for the annual trek to Las Vegas, 3/4ths of us on the Risk Science podcast are not.  In this episode, Ally, Alex, Chris and Jay discuss Ally’s experience at the WEIS conference (http://weis2014.econinfosec.org/) then slide into the NIST Cyber Security Framework (again), and tackle a few listener questions. Episode […]

With the recent release of the Verizon Data Breach Investigations Report (DBIR) we invited Wade Baker, the godfather of the DBIR, onto the podcast.  Alex and Allison were able to ask questions of Wade and Jay about the DBIR. We wrap things up talking about Allison’s paper being accepted at WEIS. Episode 14: Talking DBIR  

Alex, Chris, Allison and Jay are back at it.  Discussing the take-aways they had from RSA and other goings-on and touch on data analysis, information sharing and we manage to get Allison going on PCI and her blog post at http://www.allymiller.info/blog/risk/2014/03/516/ Episode 13: Normally Distributed

The whole crew is together again to continue the discussion from Episode 11 about the early stages of a risk management program.  We also pull in a question from a listener about setting capacity, appetite and limits.   Chris introduces us to the “Advanced Measurement Approach” at http://www.fdic.gov/regulations/laws/publiccomments/basel/oprisk.pdf Episode 12: From Crawling to Baby Steps

The gang is a little punchy, but they still manage to discuss building out a risk management program led by Chris and Alex. Episode 11: Building Risk Management

Alex, Ally, Chris and Jay are together again to talk about the speculation and conjecture around the latest mega breach. The topic of someone being wrong on the internet (http://www.slideshare.net/stiennon/risk-managementfalisitec13) comes up and we wrap it up with some non-sequitor topics. Episode 10: Speculation and Conjecture

It’s been a while since all four of us have been together and Alex catches us up on his travels and a recent hire worthy of mentioning.  Jay talk more about the book he’s working on with Bob Rudis (amzn.to/ddsec) . Jay also has an article out with Marcus Ranum at http://searchsecurity.techtarget.com/opinion/New-measures-for-security-metrics-Ranum-QA-with-Jay-Jacobs. We wrap this […]

Ally and Jay are joined by Lisa Leet to talk about decision science and Lisa’s evolving approach towards information security risk. Ali Samad-Khan and Stamford Risk Analytics are at http://stamfordrisk.com/ and the paper discussed is at http://www.soa.org/files/research/projects/research-new-approach.pdf. Doug Hubbard’s books mentioned are: How to Measure Anything and the Failure of Risk Management. Episode 8: Decision Science […]

We are joined by Bob Rudis in this episode to discuss some of his latest work, but prior to that we have a lively discussion about an event (not quite an incident) with a parked SIRA domain. Episode 7: Shoemaker’s Children