ORX Cyber

A guiding light for cyber risk management

Cyber risk is increasing across all industries, and the financial sector is no exception. It has consistently been in the top two operational risks facing financial firms in our annual risk horizon studies since 2018. We understand that cyber risk costs your firm money and can prevent you from achieving your business goals. That's why we created ORX Cyber. 

Request an information pack today

Connect to a global community through ORX Cyber

ORX Cyber is a unique operational risk management service created specifically for cyber and information security risk professionals in the second line of defence. With ORX Cyber, you can become part of a global community working together to improve cyber risk management. ORX Cyber combines cyber event data exchange with collaboration and research to provide second line practitioners with the insights and information they need to effectively manage and measure this key risk.

Contact us to discuss subscription options

Why is managing cyber and information security a challenge?

Through our work with banks and insurers around the world, we identified four main obstacles that are currently hindering cyber and information security risk management:

1. Lack of easily available, relevant data
2. Lack of clarity and consistency in practice
3. Difficulty comparing and benchmarking data and practice
4. Multiple and conflicting industry frameworks

ORX Cyber is designed to break down these barriers, enabling more effective and efficient cyber risk management. This ultimately helps the second line to support the business to achieve their strategic goals in a safe and sustainable way, and protects your customers, shareholders and reputation from the damaging effects of cyber attacks.

Controls and indicators library

The first of its kind, this library will be included in ORX Cyber and allows you to compare and benchmark your cyber risk management controls and indicators against those of your peers. The library will help you identify effective controls and indicators for cyber and information security risk management. You can also use it to support the effective allocation of IT budget.