One follower said "People are the greatest security risk for organizations." Do you agree?

Did you see the Edelman Privacy Risk Index, which we helped develop? See edelman.com/privacy-risks/ for more info.

Greetings! Any interest in seeing our latest study on critical infrastructure? If so, send your request to [email protected].

Good morning! I look forward to today's chat #infosecchat

Hello everyone! #infosecchat

@poore27Welcome to the discussion! #infosecchat

@IBMSecurityHowdy folks! Great to be here! #infosecchat

A1 The best approach is Activity Based Costing. Thanks for asking. #infosecchat

A1 ABC requires the allocation costs against specific activities. The activity centers we look at totals 181 categories. #infosecchat

@gwbdmcReputation-related costs are important, but often overlooked by security leaders. #infosecchat

A2 In general, you need smart people, good technologies and good luck! #infosecchat

Mega breaches like Target are difficult to measure because they are rare events. #infosecchat

A3 BCM improves the incident response process. #infosecchat

Companies that engage BCM in CSIRT tend to have fewer silos and silo thinkers! #infosecchat

A4 The CISO needs to lead the CSIRT. The CIO should be supportive of the process, but not the leader. #infosecchat

A5 The best way to reduce recovery time is to have a structured remediation plan in place. #infosecchat

If you don't have a structured remediation plan, get one. Consultants can help. #infosecchat

@PaulRob35443448 IBM Security Good point. The planning for physical incidents is likely to be 80% of what you need for cyber #infosecchat

A7 Enterprise risk management should own the BCM and the CISO roles. BCM and CISO should be joined at the hip. #infosecchat

Thank you for a lovely chat! I look forward to Tweeting again. Be well! #infosecchat