• What are the major components of a cyber risk management process?
• What is the role of organizational cyber risk management in enterprise risk management?
• Using the resources presented in this module and conducting your own outside research, provide a case study and discuss the integration of an organization's cyber risk management process to their ERM. In the case study:
  • Introduce two actors: Chief Risk Officer (CRO) and Chief Information Security Officer (CISO) of the same organization. CRO is responsible for ERM, and CISO is responsible for organizational cyber risk management.
  • Based on the NISTIR 8286 proposed approach, in particular, the use of Risk Register, explain how these two actors should collaborate to make cyber risk management part of an enterprise risk portfolio