Cyber Resilience Awareness Day Virtual Summit 2026

Sign up for this talk here, or for ALL sessions of the ISSA International Cyber Resilience Awareness Day Virtual Summit here: https://issa.brighttalk.com/summit/8195/

Florence Nightingale's charts showed British officials that disease was killing more of their soldiers in the Crimean War than combat was. Once the question shifted from what felt most dangerous to what did the most harm, reforms followed. Resilience ratings face the same pull today. Ask how resilient an organization is, and you often get an answer to an easier question: how bad would our worst day feel? Daniel Kahneman called this substitution. It tends to surface wherever readiness gets rated quickly, in tabletop debriefs, heatmaps, and board scorecards.

This session shows a fix that costs nothing but a little discipline: splitting every resilience question into two separate estimates before anyone reaches for a word like "critical." How often could this happen, and how much would it hurt if it did? Both go down on paper, as ranges. It's the move Nightingale made, and attendees leave with a structure simple enough to use in their next readiness review.

Featuring:
Tony Martin-Vegue, Founder and Principal, 95 Risk Advisory (https://issa.org/speaker/tony-martin-vegue/) (https://www.linkedin.com/in/tonymartinvegue/)