What Is Cyber Risk? A Clear Business-Focused Explanation
A plain-English guide to cyber risk as business exposure, including causes, impact, ownership, and decision use.
Learning library
Cyber-risk articles
Topic-specific guides on governance, assessment, operational exposure, third parties, reporting, measurement and resilience.
Cyber Risk vs Cybersecurity: What Is the Difference?
Understand the difference between cybersecurity controls and cyber risk management decisions.
Cyber Risk Assessment Explained
A practical guide to cyber risk assessment scope, scenarios, likelihood, impact, prioritization, and follow-up.
Cyber Risk Frameworks Overview: NIST, ISO, FAIR, and More
Compare cyber risk frameworks and learn how they support governance, measurement, risk analysis, and improvement.
Cyber Risk Governance Explained
A practical explanation of cyber risk governance, roles, escalation, oversight, and decision rights.
Cyber Risk Maturity Models Explained
A guide to using maturity models for cyber risk management without mistaking maturity for safety or low exposure.
Cyber Risk Metrics Explained
Learn which cyber risk metrics help decisions and which metrics only count activity.
Cyber Risk Monitoring Explained
How cyber risk monitoring tracks changes in exposure, control condition, suppliers, incidents, and unresolved decisions.
Cyber Risk Register Explained
Understand what a cyber risk register should contain and how it supports ownership, review, and action.
Cyber Risk Reporting to Boards Explained
How to report cyber risk to boards using exposure, scenarios, decisions, trend, and accountability.
Cyber Risk Scenario Analysis Explained
Use cyber risk scenarios to make likelihood, impact, dependency, and response decisions easier to understand.
Cyber Risk Tolerance Explained
Learn how cyber risk tolerance helps organizations decide what exposure can be accepted or must be reduced.
Enterprise Cyber Risk Management Explained
How cyber risk fits into enterprise risk management, leadership oversight, prioritization, and resilience.
Operational Cyber Risk Explained
Understand how cyber events affect daily operations, service delivery, staff work, and business continuity.
Ransomware Risk Exposure Explained
Understand ransomware as operational, financial, data, supplier, and resilience exposure.
Residual Cyber Risk Explained
Learn what residual cyber risk means after safeguards, controls, transfer, and treatment decisions are applied.
Supply Chain Cyber Risk Explained
A guide to cyber risk in software, digital services, managed providers, and operational supply chains.
Third-Party Cyber Risk Explained
Learn how vendors, service providers, platforms, and outsourced operations can expand cyber exposure.