Turning Brennan-Voss Group's one-line 'low appetite for cyber risk' slogan, cited by no decision and unable to place last year's EUR 40m ransomware loss, into a working instrument on the appetite loop of eight stations — instrument, cascade, tolerances, triggers, investment, stress, ratification and calibration — with risk capacity of EUR 120m, an annual appetite of about EUR 18m split into five business-unit bands, and single-event tolerances of EUR 15m amber and EUR 25m red that the EUR 40m loss broke, where an amber trigger on day 3 would have forced the decision.

CY-EXPERT-030Expert Level · Risk Management

Cyber Risk Appetite Optimisation — The Appetite Loop

An expert-level program-optimisation course that turns a one-line cyber risk appetite into a working decision instrument: inventory the decisions appetite must change, architect and cascade statements to five business units, quantify tolerances with FAIR-informed calibration and stated confidence, wire indicators and escalation, rank investment by risk reduction per euro, declare breaches and bound exceptions under stress, ratify with the board and evidence to auditors and regulators, and back-test and recalibrate. Eight labs build one board-ratified Cyber Risk Appetite Framework.

18 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Define cyber risk appetite, tolerance, capacity, and limits with figures and inventory the decisions appetite must change.
Architect board-level statements and cascade them through security categories, business units, and asset classes inside the enterprise appetite framework.
Quantify tolerances as single-event and annualised bands with FAIR-informed calibration, natural-unit scenario tolerances, and stated confidence.
Build a KRI and trigger register with derived thresholds, rated data, and escalation paths that force fund, accept, or stop decisions.

Price:৳12,000