Hashtag Realtalk with Aaron Bregg

Episode 33 - How to Build a Risk Management Program

February 03, 2021 Aaron Bregg Season 2 Episode 5
Hashtag Realtalk with Aaron Bregg
Episode 33 - How to Build a Risk Management Program
Show Notes

In this episode I have a co-host, Anthony Coggins, join me to talk with Steve Tobias about the first steps to take in building a Risk Management program.  Anthony is the Security Architect for Acrisure and Steve is one of the Lead Risk Analysts for Spectrum Health.

Talking Points:

Looking at Risk Management through the eyes of a brand new startup company we discuss:

  • What is the first thing you should do?
  • Awareness of understanding your risk posture 
    • Do it internal or hire a partner company? 
  • What documents do you need to start off with?
  • What are your security 'requirements' you need to discover?

Risk Management Resource Links:

Why CISOs must be students of the business | CSO Online

5 rules for a healthy CIO-CISO relationship | The Enterprisers Project

Small Business Cybersecurity Corner | NIST  - great resource to get started – free

Planning Guides | NIST

Stay safe from cybersecurity threats (sba.gov) – great resource to get started – free

DHS SMB Road Map 07-27-18 (cisa.gov)

Tips | CISA