Cybersecurity Risk Conference

在过去的几年里，由于在互联网上进行的商业活动的增加，以及存储在数据库中的敏感信息数量的增加，外部各方可以访问，网络犯罪和网络破坏呈爆炸式增长。此外，网络犯罪分子已经取得了进步，不仅利用技术上的敏锐，而且还利用网络钓鱼等复杂技术来捕捉人为错误。为了应对这些挑战，东北大数据创新中心（NEBDIH）将召开两次研讨会，汇集来自保险、网络安全、数据科学和政策领域的学术界、政府和工业界的专家。最终目标是开发一种协作模式（例如，跨部门联盟），这将有助于定义与成功攻击相关的频率和经济/社会严重程度，并开始制定更有效地测量和管理网络风险的基线。NEBDIH将寻求聚集领先的学术、政府、风险管理、一般工业和医疗保健参与者，他们的使命将是识别、量化并帮助减轻与网络相关的犯罪活动相关的风险。研讨会将为这些专家提供一个合作论坛：1)更好地理解和定义跨部门的相互关联的网络安全格局，以及2)规划必要的资源，以制定衡量和管理网络安全风险的基线。这些活动的预期结果包括制定一个框架，以填补组织和部门在量化和管理网络安全风险方面的空白。这可能采取主动性的形式，以获取最佳的技术、供应商和最佳实践；获取在多个层面（按行业、地区、公司）进行网络安全风险评估所需的大量数据；提供使数据可发现和可互操作的工具；并提供了一套基本工具，允许在网络安全风险背景下对数据进行高级分析。

In the past several years, cyber-crime and cyber-breaches have exploded, due to the increase in commerce conducted on the Internet, as well as increasing quantities of sensitive information being stored in databases that can be accessed by outside parties. In addition, cyber-criminals have advanced, not only employing technical acumen but also preying on human error by using sophisticated techniques like phishing. To address these challenges, the Northeast Big Data Innovation Hub (NEBDIH) will convene two workshops to bring together experts from academia, government, and industry in the fields of insurance, cybersecurity, data science, and policy. The ultimate goal is to develop a collaborative model (e.g., a cross sector consortium) that will help to define the frequency and economic/social severity related to successful attacks, and to begin to develop baselines for measuring and managing cyber risk more effectively. NEBDIH will seek to gather leading academic, government, risk management, general industry and healthcare participants, whose mission will be to identify, quantify, and to help mitigate risk associated with cyber-related criminal activity. The workshops will serve as a forum for these experts to collaborate on: 1) better understanding and defining the interrelated cybersecurity landscape across sectors, and 2) planning for the resources necessary to develop baselines for measuring and managing cybersecurity risk. Expected outcomes from these activities include developing a framework for filling the gaps in quantifying and managing cybersecurity risk across organizations and sectors. This may take the form of an initiative that captures the best of breed technologies, vendors, and best practices; captures a substantial portion of the data that is required, in aggregate, to make a cybersecurity risk assessment at multiple levels (by industry, by region, by company); provides the tools to make the data discoverable and interoperable; and provides a basic suite of tools to allow for high level analysis of the data within the context of cybersecurity risk.