AITP Chicago Cybersecurity SIG Meeting - Risk Basics: Getting Started

• Risk Register Journey – The journey from saved emails, to excel, and beyond!
• Risk Analysis Basics – Start with Qualitative, add a dash of Quantitative, and maybe some due care and diligence elements?
• Remediation and Road mapping strategies (fun).
• Reducing BIAS in Analysis, hopefully logical fallacies too.

Derek Milroy is a corporate security professional that has been implementing security, as both an internal employee and as a consultant, for the past twenty plus years.  His main areas of focus the past decade or so have been:  Systems Hardening (focusing mainly on Windows Forest/Domain/GPO architectures), Vulnerability Management, Patch Management, Log Management/SIM/SEIM, Incident Response, Network Infrastructure Security, Cloud Controls and Hardening, Red Team Program Management, Threat Modeling, and Threat Intel.  He is a former QSA and current PCIP.  He has also performed ISO 72001/27002, CIS Top18, and NIST CSF assessments.