I'm presenting at EnergySec Summit Sept. 17-19 in Denver, CO

I just received acceptance notice to present at the EnergySec Summit Sept. 17-19 in Denver, CO.  Here's the title and abstract:

How to Build Your Own Cyber Security Framework using a Balanced Scorecard

Two aspects of cyber security that everyone struggles with are metrics and business impact – How do we measure it to improve? and How do we make it meaningful to business decision makers? This gap appeared again recently in the NIST Cyber Security Framework (CSF) process RFI responses.  But there is no need to wait for NIST CSF or anything else because there is a viable method available now that you can use to build your own CSF – namely the “Balanced Scorecard” method.   

The key idea is to focus on performance against measurable objectives in all critical dimensions that, taken together, will lead to better security, privacy, and resiliency outcomes, even in a dynamic and highly uncertain threat environment. 

In this presentation, I’ll explain the ten critical dimensions of cyber security performance, explain how they are interrelated and feed off each other, show how to create a performance index in each dimension, and describe how the balanced scorecard can be used to drive executive decisions.  This presentation should be valuable to managers and executives in every type of organization in the energy sector, including the supply/service chain.  Consultants, regulators, and academics should also find it interesting and useful.

I'll be blogging about this topic in the coming days and weeks.