Prove It! - Confronting Security With Data

Explore methods for quantifying and measuring cybersecurity capabilities in this 44-minute keynote address from APPSEC Cali 2018. Discover how to assess security improvements as businesses scale, covering increased staff, systems, software, cloud platforms, third parties, and market expansion. Learn data-driven approaches to evaluate security effectiveness, including Bayesian methods, vulnerability escape rates, and survival analysis. Gain insights from Richard Seiersen, SVP/CISO of Lending Club, on developing quantitatively informed strategies, building scalable agile teams, and making digital risk measurable. Understand how to apply these concepts to large enterprise risk assessment and security assurance, even when data is limited.