John Cox Email & Phone Number

New Zealand's Cyber Risk Analyst using quantitative methods to help New Zealand business understand cyber risk in dollar terms.Quantitative analysis is needed to progress the business beyond Compliance and heat maps through to Cyber Risk Economics. GRC solutions help meet minimum regulatory compliance, but do not quantify the actual cyber risk associated with key assets and business processes. To prioritize the loss effect of cyber threats each risk needs to be quantified in financial terms. I take cyber risk analysis beyond a qualitative, compliance-based approach, to put dollar values on actual loss exposure and bring specific analysis skills, training, and experience, to the quality management of actual cyber risk.The current methods of Cyber Risk management tend to rely on guesswork or personal opinions. My approach is to gather accurate data on the cyber issues of the business and use quantitative methods to report probable loss exposure in dollar terms. This quantifies the benefits of security controls and provides a vital financial perspective to the management of Business Cyber Risk. Cyber risk needs to be quantified in financial terms. so that good decisions can be made on the value proposition of controls, mitigation and cyber insurance.I also give staff in-house training on methods of data gathering and quantitative risk analysis so that the business can evaluate the cyber risk it is exposed to. Call

Listed skills include Security, Information Security, Analyse Business Cyber Risk, Data Analysis, and 2 others.