Risk-Based Security Management (RBSM) is defined as the application of rigorous and systematic analytic techniques to the evaluation of the risks that impact an organization’s information assets and IT infrastructure. RBSM can be considered one component of a wider enterprise risk management system.

Mr. Sagalow will be presenting “An Executive View of Cyber Risk Management” as part of the Information System Security Association conference where he will be discussing how a multi-departmental approach based on financial and legal management can reduce the net cost of cyber attacks.