In this webinar, we demonstrated how risk registries can be used as an active decision-making tool rather than merely for passive documentation, including through gamification and simple, automatable methods.

Artificial intelligence has evolved from experimental IT projects to a strategic imperative in both private and public organizations. But how do you ensure that AI creates real business value without exposing your organization to unmanageable risks? In this first webinar in the series, I took a closer look at the current paradigm shift in AI and focused on strategic management responsibilities.

In the webinar, we showed how you can use risk management as a tool to focus and prioritize your efforts so you can get the most out of your available resources. Even if you’re ISO-certified, you can significantly reduce your administrative burden without compromising safety. At the same time, you’ll be able to reduce the number of nonconformities. We’ll show you how, using concrete examples.

The webinar focused on how companies could strengthen their resilience and preparedness through simple measures. Among other things, we covered: 1. The elements of a sound and comprehensive preparedness plan 2. Different types of preparedness plans and real-world experiences 3. Effective training and exercises with a focus on time efficiency 4. How organizations can “prepare” for various crisis scenarios. The webinar drew on experience from more than 60 projects and covered scenarios related to, among other things, cybersecurity, personnel, buildings, utilities, and physical information assets. It also highlighted the relevance of resilience efforts regardless of requirements from, for example, DORA, NIS2, or CER.

The webinar demonstrated how to design security in such a way that the need for awareness becomes unnecessary—through "security by design" and a focus on choosing battles wisely rather than changing behavior.

The webinar reviewed the principles of micro-training and micro-exercises and demonstrated how to enhance an organization’s preparedness through small, consistent efforts without causing a massive increase in time spent.

The webinar provided inspiration for DIY prepping for businesses and reviewed specific scenarios and "kits" that could be put together—particularly relevant in times of hybrid threats.

The webinar covered techniques for visual communication and telling relevant stories using graphics, video, photos, and animations, so that technical messages would be heard and remembered.

The webinar was based on a specific crisis scenario in which traditional metrics such as RTO and RPO were insufficient, and demonstrated how micro-drills could align expectations between IT/OT and the business.

The webinar reviewed how to build technical recovery plans that were operational, easy to maintain, and realistic to test.

The webinar provided inspiration for setting a strategic direction for cybersecurity and information security—with objectives, milestones, and risk-based prioritization serving as the foundation for relevant management reporting.

The webinar reviewed the activities that are relevant throughout the year—maintenance, instruction, training, drills, and improvements—to build a strong and operationally ready response capability.

The webinar demonstrated how risk registers could be used as active decision support rather than passive documentation, including through gamification and simple, automatable methods.

The webinar focused on the need for a comprehensive security strategy and a clear narrative that tied together management, business, and technology.

The webinar demonstrated how to create coherence between technology, processes, and strategy through simple, dynamic reports targeted at senior management.

The webinar explained why many GRC projects fail and what the organization needed to have in place before automation and tools could deliver real value.

The webinar provided methods for designing effective emergency response exercises and clarified the difference between teaching, training, and practice.

The webinar highlighted why awareness alone does not create culture and presented specific digital and organizational measures to strengthen security in everyday life.

The webinar focused on customized business continuity plans and provided examples of how they could be designed and tested in practice.

The webinar provided concrete methods for strengthening the company's resilience through simple measures in the areas of preparedness, training, and crisis management across multiple scenarios.

Many organizations want to better manage supplier risks but are unsure where to start. In the webinar, we presented a simple and pragmatic approach to building a supplier risk management framework step by step. Participants gained inspiration on how to create an overview, prioritize the most important suppliers, and adopt a risk-based approach using a model that strengthens resilience and frees up resources over time.