Skip to main content

Video

Cyber risk quantification: Making smarter cybersecurity investments

In this video, Marsh shares how your organization can use cyber risk quantification to make objective decisions on its cybersecurity investments.

Organizations devote the majority of their cyber budgets to cybersecurity technology, incident planning, staff training, cyber insurance, and consulting, a recent Marsh global survey found.

Many organizations, however, lack the ability to measure cyber risk in a meaningful way. So how are they determining the effectiveness of their investments? What tools or services are most helpful at preventing or mitigating attacks? And which are the least beneficial?

Enter cyber risk quantification, which enables organizations to express cyber risk in financial terms — and estimate the effectiveness of cybersecurity investments.

To learn how your organization can use cyber risk quantification to make objective decisions on its cybersecurity investments, watch the brief video below.

Key takeaways

Efficacy

Establishing which existing cybersecurity investments are driving the most — or least — value enables an organization to better allocate cyber risk capital. 

Prioritization

Understanding which investments are more effective can help an organization decide which cybersecurity investments to prioritize and which to de-emphasize.

Return on investment

Calculating a return on investment enables your organization to make more meaningful investments moving forward.

About our speaker

Allison Pan

Allison (Allie) Pan

Senior Vice President, Emerging Risks, Marsh Advisory

As a Senior Vice President with Marsh Advisory, Allie Pan is responsible for helping clients understand their strategic risks, especially in nascent and complex peril classes such as cyber, climate, violent threats, and supply and value chains. Allie specializes in the ways in which peril classes converge or are interdependent. This enables her clients to assess their risks in gray areas that are difficult to capture in traditional risk analysis.

Related videos

Watch our series to learn how cyber risk quantification can help enterprises express cyber risk in financial terms.