Managing cybersecurity is increasingly about managing risk. It's not possible to stop every attack or prevent every breach. So CISOs need to link the likelihood and impact of an incident to the damage it does to the organisation. But do security teams understand business risk? And do business leaders fully appreciate the threat from cyber attacks? Our guest is Richard Seiersen, chief risk technology officer at Qualys, as well as a researcher, author, entrepreneur and former CISO.