Explore a FAIR-based approach to identifying meaningful key risk indicators (KRIs) in this 43-minute RSA Conference talk. Learn how to distinguish effective metrics from noise-generating ones in risk management. Discover the characteristics of good KRIs and see how sensitivity analysis can be applied to risk quantification. Through case studies and practical examples, understand how to leverage FAIR (Factor Analysis of Information Risk) methodology to improve your risk assessment and continuous monitoring processes. Gain insights into analyzing data breaches, authentication controls, and vulnerability management. Examine the concept of risk appetite and its role in metric selection. By the end of the session, acquire the knowledge to develop more impactful risk dashboards and make informed decisions about resource allocation in your organization's risk management efforts.
What Makes a Good KRI? Using FAIR to Discover Meaningful Metrics