Why Cyber Risk is Now a Quality Risk - ATQ 32

Track: Quality in Practice | Topics: Cybersecurity risk management; secure by design; KRIs; AI risk; vulnerability management

-----

Cybersecurity is no longer just an IT issue. In this episode of All Things Quality, we talk with Jayet Moon and Jeet Shah, authors of Cybersecurity Risk Management, live at the ASQ's World Conference on Quality & Improvement, about how cyber risk connects to quality, compliance, operations, AI, supply chain risk, and product safety.

They discuss secure-by-design thinking, foundational controls, KRIs, vulnerability management, and how quality professionals can partner with cybersecurity teams to build safer, more resilient systems.

-------------------

Resources & Links

• Cybersecurity Risk Management — Practical guidance for connecting cyber risk to quality, compliance, engineering, and trust.
• Expert Answers: Cybersecurity Risk Management — A quick primer on why cyber risk belongs in quality.
• Beware the Trojan Horse: Hidden Threats, Real Risks — A clear breakdown of assets, threats, vulnerabilities, impacts, and severity.
• NIST Cybersecurity Framework 2.0 — A common structure for managing cybersecurity risk.
• ISO/IEC 27001 Overview — Background on the ISMS standard discussed in the episode.
• CISA Secure by Design — Guidance on building security in earlier.
• Jayet Moon on Artificial Intelligence Fundamentals — Jayet’s ASQTV segment on AI through a quality lens.
• AI Fundamentals Q&A with Jayet Moon — Pablo’s earlier ATQ conversation with Jayet.