4 min read
Randy Lindberg: 30 Sep 2026
Somewhere in your board policy there is a sentence like this: "The credit union will not accept cyber risk exceeding 3 percent of net worth." The...
5 min read
Randy Lindberg: 23 Sep 2026
Pull up your current risk assessment and look at what the rows actually are. For most institutions, they are threats: ransomware, phishing, insider...
5 min read
Randy Lindberg: 09 Sep 2026
The most common objection to cyber risk quantification does not come from boards. It comes from security leaders, and it goes like this: the number...
4 min read
Randy Lindberg: 02 Sep 2026
You have three proposals on your desk and the numbers are thousands of dollars apart for what each vendor calls the same thing: an IT risk...
8 min read
Randy Lindberg: 19 Aug 2026
A security officer at a credit union told me that in his entire time at the institution, they had never once talked about risk in numbers. Colors,...
