Cyber and third-party risk decisions need better evidence

Cyber and third-party risk leaders are under increasing pressure to provide clearer, more defensible answers to executives, boards and regulators. Traditional approaches such as heatmaps, maturity scores, supplier questionnaires and qualitative risk ratings remain useful, but they often rely heavily on subjective judgement.

This boostify Masterclass will explore how cyber risk quantification can improve the way organisations assess, communicate and act on cyber and third-party risk.

The session will focus on practical applications of quantification across cyber risk, compliance, supplier assurance, board reporting and investment prioritisation. Participants will examine how quantified risk thinking can help reduce subjectivity, improve the quality of risk responses and support more commercially relevant decision-making.

The masterclass will include an expert-led opening session, an industry practitioner perspective and an interactive cyber and third-party risk challenge designed to bring the concepts to life.

This is a practical session for leaders who want to make cyber and supplier risk more measurable, more comparable and more useful for business decisions.

• Date: Thursday, 27 August 2026

• Location: Sydney

• Format: In-person interactive masterclass (limited capacity)

• Instructors: Chirag Joshi and Branko Ninkovic

• Cost: Complimentary for approved participants (selective admission)

• Status: Expressions of Interest now open – limited spots