Cyber threat: its origins and consequence and the use of qualitative and quantitative methods in cyber risk assessment

Purpose Consumers increasingly rely on organisations for online services and data storage while these same institutions seek to digitise the information assets they hold create economic value. Cybersecurity failures arising from malicious or accidental actions can lead significant reputational financial loss which must guard against. Despite having some critical weaknesses, qualitative cybersecurity risk analysis is widely used in developing plans. This research explores considers how quantitative methods might address constraints seeks insights recommendations of leading practitioners use cyber assessment methods. Design/methodology/approach The study based upon a literature review thematic in-depth interviews with 16 senior representing advisory companies across world. Findings While most continue assessment, are also actively using approaches enhance their planning efforts. primary recommendation this paper that should adopt both approach. Originality/value work provides first insight into combining highlights need comparisons two different approaches.