Expert Q&A: The Importance of Integrating Cybersecurity and Enterprise Risk Management

As security professionals are all too aware, cyber threats have become dramatically more visible to many organizations in the last couple of years. And risks have proliferated across the enterprise.

Gabriele Fiata, head of enterprise risk management and innovation at SAP, recently sat down with SAPinsider to share his thoughts on the common mistakes that enterprises make when managing cybersecurity risk and the need to integrate cybersecurity into an enterprise’s risk management framework. Fiata has worked in the SAP security and GRC space for more than 15 years, the last three with SAP itself.

In the following video, Fiata explains some of the common security mistakes that enterprises make, including being overconfident about risk, not having risk owners, and following hyped up security trends. To correct these mistakes, organizations should integrate cybersecurity risks with other risks so that the C-suite and board have a comprehensive view of risk, he advises.