
Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management
Failed to add items
Add to Cart failed.
Add to Wish List failed.
Remove from wishlist failed.
Adding to library failed
Follow podcast failed
Unfollow podcast failed

Get 2 free audiobooks during trial.
Buy for $14.95
No default payment method selected.
We are sorry. We are not allowed to sell this product with the selected payment method
-
Narrated by:
-
Tom Brooks
About this listen
All organizations face a broad array of risks, including cybersecurity risk. For federal agencies, the Office of Management and Budget (OMB) Circular A-11 defines risk as “the effect of uncertainty on objectives”. An organization’s mission and business objectives can be impacted by such effects, and must be managed at various levels within the organization. This report highlights aspects of cybersecurity risk management (CSRM) inherent to enterprises, organizations, and systems.
The terms "organization" and "enterprise" are often used interchangeably; however, without an understanding of organizational structure, effective risk management is impossible. For the purposes of this document, an organization is defined as an entity of any size, complexity, or position within a larger organizational structure. The enterprise exists at the top level of the hierarchy where senior leaders have unique risk governance responsibilities. Each enterprise, such as a corporation or government agency, is comprised of organizations supported by systems.
This report describes CSRM activities at each level. Note that there may be iterative levels within the enterprise and that positions may be relative. For example, a given enterprise (e.g., a bureau or corporate division) may represent an organization to the overarching agency or corporation. Enterprise risk management (ERM) calls for understanding the core (i.e., significant) risks that an organization faces, and this document provides supplemental guidance for aligning cyber security risks within an organization’s overall ERM program. Lessons learned from historical cybersecurity incidents demonstrate the importance of collaboration among CSRM and ERM.
PLEASE NOTE: When you purchase this title, the accompanying PDF will be available in your Audible Library along with the audio.
©2021 Tom Brooks (P)2021 Tom BrooksListeners also enjoyed...
-
AWS Certified Developer Associate
- Step by Step Certification Study Guide, to Pass the Developers Exam with Confidence
- By: Jamie Murphy
- Narrated by: Tom Brooks
- Length: 3 hrs and 43 mins
- Unabridged
-
Overall
-
Performance
-
Story
Are you aspiring to become an AWS Certified Developer? Are you looking for a comprehensive resource to prepare for the AWS Certified Developer exam? Look no further! This book is your ultimate guide to acing the AWS Certified Developer certification by providing you with a robust set of practice test questions and detailed answers to help you succeed.
-
-
Read by AI
- By Luke on 06-22-24
By: Jamie Murphy
-
ChatGPT for Business
- The Best Artificial Intelligence Applications, Marketing and Tools to Boost Your Income
- By: Jake L Kent
- Narrated by: Tom Brooks
- Length: 4 hrs and 28 mins
- Unabridged
-
Overall
-
Performance
-
Story
In an era where AI is redefining industries, businesses are presented with unprecedented opportunities for growth and innovation. ChatGPT for Business unveils a comprehensive guide for harnessing the power of AI, specifically ChatGPT, to drive revenue, enhance customer engagement, and revolutionize operations.
-
-
Expertise and resources essential
- By Anonymous User on 09-05-23
By: Jake L Kent
-
Fundamentals of Enterprise Risk Management, Second Edition
- How Top Companies Assess Risk, Manage Exposure, and Seize Opportunity
- By: John J. Hampton
- Narrated by: Steven Menasche
- Length: 9 hrs and 24 mins
- Unabridged
-
Overall
-
Performance
-
Story
Extensively updated, the second edition of Fundamentals of Enterprise Risk Management examines the latest technologies, such as Riskonnect and High Tech Electronic Platform (HTEP), and helps listeners recognize both internal and external exposures, understand crucial concepts such as risk mapping and risk identification, and align risk opportunities with their organizations' business models.
-
-
Advertising spam, nothing to do with risk manageme
- By Alexander Sverdlov on 04-09-18
By: John J. Hampton
-
Strategic Risk Management
- New Tools for Competitive Advantage in an Uncertain Age
- By: Paul C. Godfrey, Emanuel Lauria, John Bugalla, and others
- Narrated by: Joe Bronzi
- Length: 8 hrs and 56 mins
- Unabridged
-
Overall
-
Performance
-
Story
This audiobook presents a new approach to risk management that enables executives to think systematically and strategically about future risks and deal proactively with threats to their competitive advantages in an evermore volatile, uncertain, complex, and ambiguous world.
By: Paul C. Godfrey, and others
-
Project Management Mastery
- A Comprehensive Guide to Successfully Implementing the Core Principles of Project Planning and Scope Management from Concept to Completion
- By: Jack Hayden
- Narrated by: KC Wayman
- Length: 4 hrs and 3 mins
- Unabridged
-
Overall
-
Performance
-
Story
Introducing Project Management Mastery—the ultimate guide to mastering project planning and scope management. This comprehensive book is perfect for project managers, team leaders, and anyone responsible for managing projects of any size, complexity, or industry.
-
-
Building Bridges, One Plan at a Time
- By Lily on 03-05-25
By: Jack Hayden
-
Sandworm
- A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers
- By: Andy Greenberg
- Narrated by: Mark Bramhall
- Length: 12 hrs and 2 mins
- Unabridged
-
Overall
-
Performance
-
Story
In 2014, the world witnessed the start of a mysterious series of cyberattacks. Targeting American utility companies, NATO, and electric grids in Eastern Europe, the strikes grew ever more brazen. They culminated in the summer of 2017, when the malware known as NotPetya was unleashed, penetrating, disrupting, and paralyzing some of the world's largest businesses—from drug manufacturers to software developers to shipping companies. At the attack's epicenter in Ukraine, ATMs froze. The railway and postal systems shut down. Hospitals went dark.
-
-
Thru the eyes of the Sandworm's hunters and prey
- By ndru1 on 11-12-19
By: Andy Greenberg
-
AWS Certified Developer Associate
- Step by Step Certification Study Guide, to Pass the Developers Exam with Confidence
- By: Jamie Murphy
- Narrated by: Tom Brooks
- Length: 3 hrs and 43 mins
- Unabridged
-
Overall
-
Performance
-
Story
Are you aspiring to become an AWS Certified Developer? Are you looking for a comprehensive resource to prepare for the AWS Certified Developer exam? Look no further! This book is your ultimate guide to acing the AWS Certified Developer certification by providing you with a robust set of practice test questions and detailed answers to help you succeed.
-
-
Read by AI
- By Luke on 06-22-24
By: Jamie Murphy
-
ChatGPT for Business
- The Best Artificial Intelligence Applications, Marketing and Tools to Boost Your Income
- By: Jake L Kent
- Narrated by: Tom Brooks
- Length: 4 hrs and 28 mins
- Unabridged
-
Overall
-
Performance
-
Story
In an era where AI is redefining industries, businesses are presented with unprecedented opportunities for growth and innovation. ChatGPT for Business unveils a comprehensive guide for harnessing the power of AI, specifically ChatGPT, to drive revenue, enhance customer engagement, and revolutionize operations.
-
-
Expertise and resources essential
- By Anonymous User on 09-05-23
By: Jake L Kent
-
Fundamentals of Enterprise Risk Management, Second Edition
- How Top Companies Assess Risk, Manage Exposure, and Seize Opportunity
- By: John J. Hampton
- Narrated by: Steven Menasche
- Length: 9 hrs and 24 mins
- Unabridged
-
Overall
-
Performance
-
Story
Extensively updated, the second edition of Fundamentals of Enterprise Risk Management examines the latest technologies, such as Riskonnect and High Tech Electronic Platform (HTEP), and helps listeners recognize both internal and external exposures, understand crucial concepts such as risk mapping and risk identification, and align risk opportunities with their organizations' business models.
-
-
Advertising spam, nothing to do with risk manageme
- By Alexander Sverdlov on 04-09-18
By: John J. Hampton
-
Strategic Risk Management
- New Tools for Competitive Advantage in an Uncertain Age
- By: Paul C. Godfrey, Emanuel Lauria, John Bugalla, and others
- Narrated by: Joe Bronzi
- Length: 8 hrs and 56 mins
- Unabridged
-
Overall
-
Performance
-
Story
This audiobook presents a new approach to risk management that enables executives to think systematically and strategically about future risks and deal proactively with threats to their competitive advantages in an evermore volatile, uncertain, complex, and ambiguous world.
By: Paul C. Godfrey, and others
-
Project Management Mastery
- A Comprehensive Guide to Successfully Implementing the Core Principles of Project Planning and Scope Management from Concept to Completion
- By: Jack Hayden
- Narrated by: KC Wayman
- Length: 4 hrs and 3 mins
- Unabridged
-
Overall
-
Performance
-
Story
Introducing Project Management Mastery—the ultimate guide to mastering project planning and scope management. This comprehensive book is perfect for project managers, team leaders, and anyone responsible for managing projects of any size, complexity, or industry.
-
-
Building Bridges, One Plan at a Time
- By Lily on 03-05-25
By: Jack Hayden
-
Sandworm
- A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers
- By: Andy Greenberg
- Narrated by: Mark Bramhall
- Length: 12 hrs and 2 mins
- Unabridged
-
Overall
-
Performance
-
Story
In 2014, the world witnessed the start of a mysterious series of cyberattacks. Targeting American utility companies, NATO, and electric grids in Eastern Europe, the strikes grew ever more brazen. They culminated in the summer of 2017, when the malware known as NotPetya was unleashed, penetrating, disrupting, and paralyzing some of the world's largest businesses—from drug manufacturers to software developers to shipping companies. At the attack's epicenter in Ukraine, ATMs froze. The railway and postal systems shut down. Hospitals went dark.
-
-
Thru the eyes of the Sandworm's hunters and prey
- By ndru1 on 11-12-19
By: Andy Greenberg
-
The Smartest Person in the Room
- The Root Cause and New Solution for Cybersecurity
- By: Christian Espinosa
- Narrated by: Kaleo Griffith
- Length: 6 hrs and 54 mins
- Unabridged
-
Overall
-
Performance
-
Story
With cyberattacks resulting in often devastating results, it’s no wonder executives hire the best and brightest of the IT world for protection. But are you doing enough? Do you understand your risks? What if the brightest aren’t always the best choice for your company? In The Smartest Person in the Room, Christian Espinosa shows you how to leverage your company’s smartest minds to your benefit and theirs. Learn from Christian’s own journey from cybersecurity engineer to company CEO.
-
-
Bland
- By Jonathan on 09-01-21
-
RMF ISSO: Foundations (Guide)
- NIST 800 Risk Management Framework for Cybersecurity Professionals
- By: Bruce Brown
- Narrated by: Frank Block
- Length: 1 hr and 32 mins
- Unabridged
-
Overall
-
Performance
-
Story
This is a breakdown of the NIST risk management framework process for cybersecurity professionals getting into security compliance. It is written in layman's terms, without the convoluted way it is described in the NIST SP 800-37 revision 2. It goes into what the information system security officer does at each step in the process and where their attention should be focused. Although the main focus is on implementation of the NIST 800 RMF process, this book covers many of the main concepts on certifications, such as the ISC2 CAP.
-
-
Great supplement to the physical book
- By Andrea Christine on 06-08-24
By: Bruce Brown
-
Risk
- A User's Guide
- By: General Stanley McChrystal, Anna Butrico
- Narrated by: General Stanley McChrystal
- Length: 10 hrs and 40 mins
- Unabridged
-
Overall
-
Performance
-
Story
Retired four-star general Stan McChrystal has lived a life associated with the deadly risks of combat. From his first day at West Point, to his years in Afghanistan, to his efforts helping business leaders navigate a global pandemic, McChrystal has seen how individuals and organizations fail to mitigate risk. Why? Because they focus on the probability of something happening instead of the interface by which it can be managed.
-
-
Good nuggets however wants no risk
- By Tim Everist on 10-22-21
By: General Stanley McChrystal, and others
-
The Art of Attack
- Attacker Mindset for Security Professionals
- By: Maxie Reynolds
- Narrated by: Stephanie Dillard
- Length: 9 hrs and 50 mins
- Unabridged
-
Overall
-
Performance
-
Story
In The Art of Attack: Attacker Mindset for Security Professionals, Maxie Reynolds untangles the threads of a useful, sometimes dangerous, mentality. The book shows ethical hackers, social engineers, and pentesters what an attacker mindset is and how to and how to use it to their advantage.
-
-
A Chess game to win
- By Anonymous User on 10-19-22
By: Maxie Reynolds
-
The Threat Intelligence Handbook
- A Practical Guide for Security Teams to Unlocking the Power of Intelligence
- By: Recorded Future
- Narrated by: Chris Pace
- Length: 2 hrs and 37 mins
- Unabridged
-
Overall
-
Performance
-
Story
It’s easy to find descriptions of what threat intelligence is. But it’s harder to learn how to use it to truly make your organization safe from cybercriminals. How can threat intelligence strengthen all the teams in a cybersecurity organization? This audiobook answers this question. It reviews the kinds of threat intelligence that are useful to security teams and how each team can use that intelligence to solve problems and address challenges.
-
-
Basic information for starters
- By SUNIL VARKEY on 03-11-19
By: Recorded Future
-
The Tao of Open Source Intelligence
- By: Stewart K. Bertram
- Narrated by: Peter Silverleaf
- Length: 3 hrs and 23 mins
- Unabridged
-
Overall
-
Performance
-
Story
Accessing and using the information that's freely available online is about more than just relying on the first page of Google results. Open source intelligence (OSINT) is intelligence gathered from publically available sources and is the key to unlocking this domain for the purposes of investigation. The Tao of Open Source Intelligence provides a comprehensive guide to OSINT techniques for the investigator.
-
-
Very informative
- By Techdice on 02-13-22
-
The ChatGPT Advantage
- Transform Your Business with Artificial Intelligence
- By: Diana Sterling
- Narrated by: Vicky David
- Length: 12 hrs and 33 mins
- Unabridged
-
Overall
-
Performance
-
Story
Introducing the definitive guide to AI business transformation, The ChatGPT Advantage: Transform Your Business with Artificial Intelligence. This exclusive guide is more than audiobook—it's your ultimate roadmap to the AI-driven future of business. Discover a trove of actionable insights, practical advice, case studies, and step-by-step tutorials that will prepare your company for unparalleled success in the age of AI.
-
-
Total, unmitigated buzzword porn
- By Kyle Woolard on 11-14-23
By: Diana Sterling
-
Association Management Excellence
- Become an Expert by Preparing for the CAE EXAM
- By: D.A. Abrams
- Narrated by: Jack Chekijian
- Length: 5 hrs and 12 mins
- Unabridged
-
Overall
-
Performance
-
Story
The CAE certificate is one of the most selective and unique credentials in business today. There are, in fact, only 4,000 Certified Association Executives, a mere 2.5% of all professionals managing associations and non-profit organizations. If you aspire to become one of them, it's an excellent ambition. I'd like to help you succeed.
-
-
Great study guide
- By Shaina S on 06-10-20
By: D.A. Abrams
-
Certified Association Executive Exam
- Strategies for Study & Success
- By: D. A. Abrams
- Narrated by: Jack Chekijian
- Length: 4 hrs and 1 min
- Unabridged
-
Overall
-
Performance
-
Story
This book is designed to do three things. First, it seeks to explain the CAE certification and its many benefits, in the hopes that you will join me in preparing for and attaining this credential. Second, it will provide a step-by-step process for preparing for the CAE examination, strategically and comprehensively. Third, it sets out to explain how to ready yourself for the test itself, and to offer specific recommendations and solid tactics for approaching it, so that you achieve your objective and complete it, successfully and with ease.
By: D. A. Abrams
-
Accelerate: Building and Scaling High Performing Technology Organizations
- By: Nicole Forsgren PhD, Jez Humble, Gene Kim
- Narrated by: Nicole Forsgren
- Length: 4 hrs and 58 mins
- Unabridged
-
Overall
-
Performance
-
Story
How can we apply technology to drive business value? For years we've been told that the performance of software delivery teams doesn't matter - that it can't provide a competitive advantage to our companies. Through four years of groundbreaking research to include data collected from the State of DevOps reports conducted with Puppet, Dr. Nicole Forsgren, Jez Humble, and Gene Kim set out to find a way to measure software delivery performance - and what drives it - using rigorous statistical methods.
-
-
Only if you have nothing else to do
- By Gvido on 07-24-18
By: Nicole Forsgren PhD, and others
-
The Online Business Academy for AI
- A Modernized Artificial Intelligence Guide for Beginners to Create New Ideas, Improve, and Maximize Productivity with Professional Content and Copy That Sells
- By: Thomas Bourne
- Narrated by: Juanelle Louise Holl
- Length: 6 hrs and 11 mins
- Unabridged
-
Overall
-
Performance
-
Story
Is AI something you’ve heard a lot about but you literally have zero ideas on how to even get started with it? If you want to make moves in the world of business and start bringing in 10 times as more money to your online business, everyone will tell you to use AI. You’ll also be sold the AI dream if you say you want to progress in your career faster than your rivals and find a new way to cruise through your to-do list while making it look easy.
-
-
VERY basic and repetitive
- By AndrewRez on 12-24-23
By: Thomas Bourne
-
The DevOps Handbook, Second Edition
- How to Create World-Class Agility, Reliability, & Security in Technology Organizations
- By: Gene Kim, Jez Humble, Patrick Debois, and others
- Narrated by: Ron Butler
- Length: 15 hrs and 51 mins
- Unabridged
-
Overall
-
Performance
-
Story
This award-winning and best-selling business handbook for digital transformation is now fully updated and expanded with the latest research and new case studies! Over the last five years, The DevOps Handbook has been the definitive guide for taking the successes laid out in the best-selling The Phoenix Project and applying them in any organization. Now, with this fully updated and expanded edition, it’s time to take DevOps out of the IT department and apply it across the full business.
-
-
Atrocious
- By Anonymous User on 05-25-22
By: Gene Kim, and others