The cyber and information security risks are evolving, and hybrid threats can arise as these overlay with physical security and data protection risks.
In his book, Against the Gods, the Remarkable Story of Risk, Peter Bernstein notes that “the essence of risk management lies in maximizing the areas where we have some control over the outcome while minimising the areas where we have absolutely no control over the outcome and linkage between effect and cause is hidden from us.” Traditionally our respective institutions have predominantly focused on financial risk, but rebalancing over the past decade to strengthen nonfinancial risk management.