Careers

Diversity, Equity & Inclusion

Experience

Innovation

Interactive Maps

Locations

About

Pages

Meet our team of innovators
Ask us how we do it

Professionals

Insights

Services

Thompson Hine LLP, a full-service business law firm with approximately 400 lawyers in 8 offices, was ranked number 1 in the category “Most innovative North American law firms: New working models” by The Financial Times and was 1 of 7 firms shortlisted for The American Lawyer’s inaugural Legal Services Innovation Award. The firm has been recognized by the National Law Journal as a Legal Technology Trailblazer and featured by Bloomberg for its innovative service delivery models, which drive accuracy and predictability. The firm’s commitment to innovation is embodied in Thompson Hine SmartPaTHTM – a smarter way to work – predictable, efficient and aligned with client goals. For more information, please visit ThompsonHine.com and ThompsonHine.com/SmartPaTH.

Home | Thompson Hine LLP

Atlanta

Chicago

Cincinnati

Cleveland

Columbus

Dayton

New York

Washington, D.C.

Most CISOs believe that everything worth reporting on must first be measured. We must show trends and prove that our investments in security solutions are working and that our security program is maturing. In this final series of the year we will look at measuring, quantifying, and reporting cyber risk in more meaningful ways to the business.

contentpilot/introduction

<strong>How do we visualize, quantify, and report the security risks of our people, systems, apps, third- parties, and data? What reportable metrics show we are effectively managing risk?</strong>

core/paragraph

Security Controls Covered: SIEM, GRC, Third Party Risk Scoring

Risk is the key word we use when talking to the business. Yet the translation of security risk to how it impacts the business has been a constant challenge. Too often, we report things that seem relevant to the business but are ultimately too technical and focus on vulnerability and not risk. We struggle to understand all the risks of our people, systems, apps, and data. We have tried multiple dashboards and risk scoring techniques and we still are struggling to convey security risk the right way.

In this series, we will talk about methods and best practices to see all of our security risks, rank those risks, and report them better as business risks.

Security and Third-Party Risk Visibility & Reporting

Services