
Our Approach To Managing Cyber Risk
Cybersecurity is an infinite game. CYRVANA’s approach to address this problem has always been to focus on the fundamentals. We strongly believe that majority of the issues related to cyber risk can be addressed by fixing basic cyber hygiene. Every company is different with unique culture and digital DNA. When assisting any customer either to revamp or build a cyber program we follow and focus on the following three core aspects while keeping people at the center of this transformation throughout.
- Align, enable, and execute what the customer needs and account for threats specific to what matters most to the corresponding customer
- Focus on quantifying cybersecurity risk with the better methods to communicate effectively with senior leadership an enable them to make sound and timely decisions
- Work on consolidating and rationalizing tools and/or resources where possible
Four Noble Truths About Cyber Risk
Just as Buddha determined that there are “Four Noble Truths” that form the basis of our reality, there are four noble truths tied to cyber risk and an eight fold path that should be adopted.
- First Noble Truth: Cyber risk exists irrespective of the size and shape of an organization
- Second Noble Truth: There are causes to cyber risk. It boils down to determining what it is that’s causing this risk
- Third Noble Truth: Cyber risk well-being exists
- Fourth Noble Truth: Identify the path to cyber risk well-being
Path To Attain Cyber Risk Management Nirvana
What works for one organization won’t work for another, because the mission, corresponding digital DNA, and customers served by each organization is unique. However, what all paths could have in common is the ability to manage risk efficiently by adopting the eight guidelines:
- Right Understanding (Skill to measure risk)
- Right Thought (Leadership buy-in)
- Right Speech (Leverage risk taxonomy, lanaguage, and communication)
- Right Action (Assess and evaluate risk with right methods)
- Right Livelihood (Being eithical and compliant)
- Right Effort (Address the risk in the gap action plan)
- Right Mindfulness (Evaluate any risk dependencies and keep business goals in mind)
- Right Concentration (Critical thinking to prioritize risk and focus in the right places)