Using Risk 360 For Collaboration Across Cyber Professionals

In a previous blog post we introduced Risk 360, our new digital platform which we use to support the cyber remediation journey.

One of our starting points for the project was around improving collaboration. We recognise that a number of people need to be involved in securing the organisation, and our aim was to bring them all onto a single platform where they had a shared view of open security risks and the remediation plan.

With this in mind, Risk 360 has therefore been developed to bring the following personas onto the platform:

Executive

Executives are ultimately responsible for the secure operations of the business. For them, it is important to see an at-a-glance view of where the risk lies on a red/amber/green dashboard and through a lens of high level metrics. Where appropriate, executives should nonetheless be able to drill down to see detail.

IT Operations

These people are typically close to the business and have an understanding of cyber security maturity. They will also be involved in the mitigation and remediation exercise. Our aim with Risk 360 is to make this process as easy and collaborative as possible for IT and security professionals.

Third Parties

A business will typically have many third party suppliers. We felt it was important to bring these people into the process as this is where a lot of security risk resides.

QRI Team

The QRI team are working closely to support, advise and orchestrate this entire process. The QRI Team will work with the team to support through the online portal.

This type of collaboration is new for security oriented software. Often, this software is aimed purely at technical users, but does not offer any visibility to executives. Typically, it is also internal to a business and does not recognise the third party supplier network and partnerships which are a reality of todays business and where a lot of the risk lies.

We believe that security is a collaborative exercise, and that collaboration has to be at the heart of security tooling if we are going to build secure and resilient organisations.