Risk Bulletin – Summer 2022
Law Firm CISO Forum #7 | Webinar 
As part of our ongoing Law Firm CISO webinar series we focused our 7th Forum on the value in carrying out regular security assessments, as they can help inform and align decisions around mitigation, transfer, or recover strategies back to business objectives.

We were joined by Indi Birak, a Director in Aon’s Security Advisory practice who facilitated a peers-led discussion around questions such as:
• What has been good, in your experience, about conducting cybersecurity audits and/or assessments?  What has not gone well – and why?

• How to set up an audit or assessment exercise up for success – and how is “success” defined?

• What innovations are you seeing in the methodology for audits and assessments?

• How are findings presented back to the wider firm?  Can this process be improved?

• Have you encountered challenges around implementing change from findings? Why or why not?

• How do you determine the ROI (or ROSI) of undertaking an audit or assessment exercise? When is this done?

For more information about our CISO Forum series, get in touch.
Insight | Whitepaper | Cyber Loop: A Model for Sustained Cyber Resilience

There is nothing linear about cyber security. This is the guiding principle of Cyber Loop, a cyber risk management model that unites stakeholders irrespective of role to make better decisions on cyber risk.

Access Whitepaper via the link here