Risk Based Security Metrics 
Bill Frank
OpenService
Presentation Abstract:
Reducing IT Risk is generally considered the primary goal of a risk governance process and the deployment of security controls. However, measuring risk and therefore measuring the reduction of risk in an objective manner has proven to be difficult. In fact, there is no generally accepted method for measuring risk. It is therefore difficult to determine the effectiveness of security controls. It is for this reason that executive management has difficulty determining not only which security controls to deploy, but how much to invest in them.
Bill will compare and contrast the best known risk measurement methodologies, ALE (Annualized Lost Expectancy) and FAIR (Factor Analysis of Information Risk) with its risk calculation methodology, RWEST (Risk Weighted Event Scoring and Thresholding)..
Bio:
Bill Frank brings over 20 years of executive sales, business development, and product management leadership to OpenService with a deep understanding of the security and network management markets. Before he was recruited to rejoin OpenService, Frank served as Vice President of North American Sales for Insightix where he opened the North American market for this Israeli network discovery and access control software company. Based on the company’s strong sales growth, Insightix secured a substantial investment from a top-tier venture capital firm.
In his initial service at OpenService, Frank held senior management positions including Vice President of Product Management and Vice President of Sales where he grew revenue more than 1,200 percent over five years. Prior to OpenService, Frank provided business development consulting to Authentica (acquired by EMC), a leading Enterprise Digital Rights Management software company. Earlier, he was Vice President of Sales and Business Development for Savoy Software, which broke new ground providing Internet-based digital video security solutions using finite-state rule processing technology. Frank began his career at Unisys and then Data General (also acquired by EMC) where he held sales management and product management positions. Frank earned his CISSP in March 2003. Frank graduated from City College of New York with a BA in Economics/Finance and completed graduate work in Information Systems at New York University's Stern School of Management.
