 security by design part 8 security by design part 8 hemraj mon 10202025 332 security by design part 8 contributors joseph f norton joseph f norton risk security and crisis management professional linkedin joseph fnorton security by design part 8 latest trending image my last blog posts have focused on introducing systemic digital risk in complex digital environments and exploring new frameworks with which to assess risk in today s business environments systemic digital risk in complex digital environments i shared the view that systemic risk is the threat that component failure in a complex system will cascade and jeopardize the much larger system and identified five elements of systemic risk that can significantly impact eight digital domains that work together across complex digital systems to produce and preserve business value these lead us to new models for integrated risk management the director and riscx frameworks source   systemic digital risk understanding and overseeing complex digital environments with the director and riscx frameworks   digital directors network used with permission as a quick start to the new year let s review the director  and the riscx  frameworks the director  framework shows us eight key domains that enable complex digital systems from a corporate director s perspective these domains represent the key risk areas within a business digital system the domains are codependent and influence control how a digital business system functions and supports business value the riscx  framework presents for us five drivers of risk which are unique to today s massively complex and interconnected digital system traditional risk management frameworks and assessment models often fail to consider and address these unique drivers of risk which have been seen to be the cause of system and systemic failure on a massive scale to fully understand appreciate and represent systemic digital risk in the complex digital environments with which we operate our businesses today calls for us to examine each of the five drivers of risk  riscx  framework against each of the eight domains of complex digital systems  director  framework  assess complex digital systems for systemic risk contagion weakness  business value the key digital domains that drive it and the elements that can cause systemic risk combine as an integrated framework with which to fully view systemic risk in digital systems by taking this approach to assessing risk we can reveal significant gaps in our understanding of component and systemic risk throughout our digital business systems this is a risk model that can be applied at any level of an organization including programs projects business units and enterprises it is only when systemic risk in complex digital systems is understood that it can be fully managed and mitigated this is an approach that reframes how executives and corporate directors comprehend complex systemic risk in digital business ecosystems it is intended to provide a blueprint for how technology executives can communicate the complex issues they manage to the attention to their senior executive leadership and to the boardroom in a way that resonates with a senior executive s and or corporate director s responsibilities and mindset bringing these views together allows us to frame risk against business value or rather assessing risk to the business value of our organizations in my next series of posts i will endeavor to explore with you the exploding global risk ecosystem that threatens our businesses today and into the future and to help you selfassess as you ask your organization the following question  do you and your business have the ability to anticipate prepare for and adapt to changing conditions to withstand respond to and recover from a cyber business disruption  note source material for this post  systemic digital risk understanding and overseeing complex digital environments with the director and riscx frameworks  digital directors network  joseph f norton is a risk security and crisis management professional he is a founding member and qualified technology executive of the digital directors network chair of the advisory board with next era transformation group and chief security officer with apf technologies he has served as chief security officer svp at atos chief technology officer and head of operations svp at philips chief technology officer svp at novartis executiveinresidence with mckinsey company and chief technology officer at mcdonald s he has also held professional roles during his career with jpmorgan bank oracle sybase and grumman aerospace corporation and the united states navy webinar image the ciso exchange for a safer digital world image zero trust architecture adoption in federal government image zero trust architecture adoption in federal government expert content image shadow ai and the governance gap what leaders must do now shantanoo govilkar image security by design part 2 joseph f norton image employee training awareness laszlo s gonc popular articles unleashing business potential the power of adaptive enterprise architecture in the digital age businesses must adopt an ad 15 best practices in salesforce development many businesses have decided to use salesforce  what is governance risk and compliance grc a definitive guide grc is the capability or integrated collection artificial intelligence for all responsibly as we look towards the turn of another year it get the latest insights straight from our desk to your inbox subscribe featured articles explore more  image whitepaper ransomware threat management ransomware continues to be a real threat to business operations across all industries no organization is safe from this threat laszlo s gonc cissp first senior fellow divihn cybersecurity center of excellence view image cybersecurity incident response preparedness an incident response framework provides a structure to support incident response operations a framework typically provides guidance on what needs to be done but not on how it is done laszlo s gonc cissp first senior fellow divihn cybersecurity center of excellence view image iot medical device cybersecurity healthcare data and medical devices would be aggressively targeted by ransomware attacks since early 2017 has proven to be true  laszlo s gonc cissp first senior fellow divihn cybersecurity center of excellence view 