Quantifying CyberRisks- Solving the Riddle (per AT&T CyberSecurity Blog) March 11, 2021
Posted by Chris Mark in Uncategorized.Tags: AT&T, Bayes, Chris Mark, cybersecurity, data breach, hacker, risk
add a comment
I recently published a new article on the AT&T CyberSecurity blog titled Quantifying CyberRisks- Solving the Riddle. Below is an excerpt. Click ‘read more’ to read the entire piece.
In the late 1990’s and early 2000’s there was a concept that was bandied about that was coined “Return on Security Investment” or ROSI. Borrowing from the common business term Return on Investment (ROI) where a return on a particular investment (capital investment, personnel, training etc.) could be quantified, the cybersecurity industry attempted to quantify a return on security investment.
Fundamentally, the primary failing of this concept is that it is mathematically impossible (approaches mathematical impossibility) to quantify an event “not occurring”. In short, if a company has “zero” security events that impact them deleteriously in a given year, was the $5 million security expenditure appropriate? Should it have been less since there was no security event that caused a loss? If the company experienced an event, was the return on the investment then the difference between the expenditure and the overall losses from the incident? It simply did not work, as it was mathematically flawed.
Fast forward to 2021 and companies once again are fixated on quantifying cyber risk and, more importantly, cybersecurity exposure. The question is similar and is asked: “Can companies accurately quantify cybersecurity risks today?”
This is a complex question but to attempt an answer it is first important to have a working definition of several terms.
Risk- is an artificial construct which can be easily expressed as the function of the likelihood of an adverse event occurring (often provided as a statistical probability) and the impact, should the event be realized (in business, and for the purposes of this article, it will be expressed in monetary terms.). In short R=fPI. Click Here to Read More!
Marine Reconnaissance Foundation’s fundraiser: MGySgt “Chunks” Padilla November 24, 2020
Posted by Chris Mark in Uncategorized.Tags: Chunks Padilla, Donation, MGySgt Padilla, Mountain View Fire, recon marine, USMC, Veteran
add a comment
Please consider donating! On November 18th, 2020 Master Gunnery Sergeant Charles “Chunks” Padilla and his family lost their home and all of their belongings in the Mountain View wild fire near the Marine Corps Mountain Warfare Training Center at Bridgeport, California.
This is a call for all Recon teammates, supporters and family members and Americans who recognize the sacrifices people like MGySgt Padilla make to keep us safe to raise funds to support this great American and his family.
He has spent his entire adult life serving our Nation in peace and in war. He has also dedicated his retired life to supporting others, to include serving as an advisor to the Marine Reconnaissance Foundation Board of Directors.
Chunks is a brother, teammate and a significant figure in the Marine Reconnaissance Community. He is also a plank owner of Marine Corps SOCOM Detachment-1 (MCSOCOM DET-1), the origin of today’s Marine Raider community. For those that know him, you know that he would never ask for help….so the Marine Reconnaissance Foundation is doing so on his behalf. It is time to live the Recon Creed and support our brother and his family.
We have spoken to Chunks and he is aware of this effort and has given his reluctant approval for it. Please donate if financially able and share with your friends and family.
Never above you Never below you Always by your side
Holiday Shopping Safety! Debit or Credit? PIN or Pen? Check or Cash? November 18, 2020
Posted by Chris Mark in InfoSec & Privacy, Risk & Risk Management.Tags: Chris Mark, credit or debit, durban amendment, mark consulting group, PCI DSS, PIN
1 comment so far
With the holidays around the corner, it is a hot time for criminals to steal from us all! CyberCriminals are specifically after your money and cards. There is ongoing confusion about whether cards are better than checks are better than cash. While we all have our own opinions, I think the argument is pretty clear that payment cards are the most secure options for consumers. Read below!
For some background, I am a payment card security professional. I have worked at both MasterCard and with Visa, as well as the other card brands. I now work at a major telco overseeing the payment security program. 2020 marks the 15th consecutive year someone has stolen my card at least once (17 times in 15 years) BUT…I wasn’t worried…read below to find out why! (more…)
Yes, elections do have consequences September 28, 2020
Posted by Chris Mark in Uncategorized.add a comment
Could not have said it better..please read…
When Barack Obama took over as president in 2009, Democrats controlled both the House and the Senate.
Marine Sniper’s review of the CAA MCK (Micro Conversion Kit) August 10, 2020
Posted by Chris Mark in Uncategorized.Tags: 9mm, Antifa, BLM, CAA MCK, Glock 17, Marine Sniper, PDW, Self Protection, Shooters Station.
5 comments
These are strange times. I think we all see that. Applications for firearms have increased 500% in Pennsylvania alone.. I happened to be at a gun range in Conroe Texas that I really like. Shooters Station in Conroe has very knowledgeable staff…great ranges and a great selection…Many gun ranges have ‘gun dorks’ that are arrogant…aloof and not really helpful. I have shot at scores of gun ranges. Most leave me unimpressed.. Shooters Station is very
good! Caleb gave me a few free range passes and was super helpful!
These folks at Shooters Station have a clean store, amazing range and people willing to help at every step. I happened to step in and saw they had a CAA MCK. This is a kit that allows you to put a (in this case) a Glock 19 or 17 pistol) into a platform that turns it into a SBR (if you have the licence) or at least a pistol that is much more stable and allows you to put optics and other fun things on it….
I mounted a Sig Romeo5and did shoulder it at the range. I wanted to see how it shot. WOW! First..the MCK..is LIGHT! Very light. Probably about 1 lb…it is made of Polymer and is super light and strong. I put my Glock 17inside…and zeroed my Sig Romeo5. That little PWD (Personal Defense Weapon) was amazing! No recoil…zero flash…it was dinging at 25 yards like nobody’s business! I did not upgrade to a match barrel and the G17 had not even been broken in! 
It has Picatinny rails and collapses down to about 10 inches. Small enough to keep in a small back pack. Weighed with the Pistol inside and a light, laser and Romeo5? Less than 3.5 lbs. Easy to handle.
I can say definitively..if I had to get into a gun fight..I would much rather have a G17 or G17 in the MCKthan go with just the pistol. As a friend of mine said (wont say where he works)…“Shooting a rifle well is like driving a race car. Shooting a pistol well is like flying a fighter jet”. Based upon his background…I agree. Putting good optics on the MCK and the stability makes it a no brainier in my mind.
I have decided my G17 will live in my MCK platform. It folds up nicely to keep in my Jeep and no need to have a Pistol alone.
At the range, I shot rapid shot at 25 yards. It was a bit high and left but ammo right now is hard 
to come by so I just wanted to group. You can see the group I shot. 20 Rounds at 25 yards…off hand all within 2.5 inches using a red dog sight. WOW! That is impressive from a 9mm Glock with a stock barrel I was shooting at bout 2 rounds per second! Needless to say, I am super impressed.
Construction is SOLID! Polymer is very strong…it is modular and it does not rust. The stock moves with ease and keeping the G17 in place is solid. Keeps zero very well! Overall, it is worth the $298 I paid at Shooter’s Station 100x over. I was a bit concerned as I had never met them that I might be given a ‘tourist rate”…nope…$298. For that price…amazing.
For anyone looking for a great PDW and that has a Glock 17/19/22/23/43 etc. Definitely check out CAA MCK! One thing to consider. I teach a LOT of people to shoot pistols. That is hard. I can put someone behind the MCK with a Glock and they are dead on within 5 minutes! In today’s world..that is important…..
Global Security, Privacy, & Risk Management 