
Date: Thursday 2nd April 2026
Time: 11:00 – 12:00 ( GMT )
Venue: Online
In an era where a compromised thermostat can unlock a high-security vault, the traditional “Risk Matrix” is no longer enough. Security leaders are increasingly tasked with justifying multi-million pound budgets to Boards who demand data-driven certainty rather than “gut feel” heatmaps.
This session introduces the Predictive Risk Quantification (PRQ) concept—a methodology designed to translate security gaps into financial reality. We will explore how to quantify the “Threat Delta”: the measurable gap between an adversary’s capability and your existing controls, whether those controls are firewalls or reinforced steel doors.
Speaker:
Ian Thompson is an experienced cybersecurity expert with a diverse background spanning the government, military, private industry (CNI), and intelligence sectors across multiple countries. He excels in enhancing security practices, streamlining operations, and fostering collaborative approaches to tackle complex threats. By leveraging a global network of cross-industry experts, Ian has consistently provided operational leadership to safeguard organisations against major security risks while reducing costs. His expertise includes threat intelligence, incident management, cyber resilience, proactive defence, and threat-led assessments regarding the impact and cost of cyber-attacks.
Key Learning Objectives:
The PRQ Framework: Understand how to apply industry-standard risk equations to create a unified view of security.
Decoding the Threat Delta: Learn how to calculate the quantified gap in relevant controls to predict the likelihood of a breach.
Practical Demonstrations: * Pure Cyber: Quantifying the financial impact of a systemic ransomware event.
The “Digital Crowbar”: A case study on a cyber-physical event where digital vulnerabilities bypass physical perimeters.
Hardened Assets: Applying PRQ to traditional physical threats, from tailgating to perimeter breaches.
Optimised Decision Making: How to use quantified data to prioritise security spend, satisfy regulatory requirements, and communicate risk effectively to the C-Suite.
** Open to SyI Members only **
