{ "media_type": "text", "post_content": "Got a phone interview in industry tomorrow. Can anybody provide some insight into developing a cyber risk assessment framework? FSI", "post_id": "584a19dec0a08a00100a22f0", "reply_count": 14, "vote_count": 2, "bowl_id": "552d1d24dc1c586b09d2d051", "bowl_name": "Consulting" }

Got a phone interview in industry tomorrow. Can anybody provide some insight into developing a cyber risk assessment framework? FSI

like
Posting as :
works at
You are currently posting as works at

Why are you interviewing for a job in industry if you don't do a fundamental skill that it may require?

like

Recruiter said the manager liked me and I'm gonna be considered for the role! Seems like the holidays will drag this whole process out tho into 2017

like

Just say "per nist" a lot

like

Haha I wanna get out of doing the techy work and be involved in issues that C-suite care about. I know I can do it, it's simply understanding a bigger approach.

like

Congrats, OP

like

Not a risk guy, trying to gain an understanding of the approach

like

ISO 27001/2

like

You use industry frameworks and/or the organization's policies, procedures and standards to determine which "key controls" (or just all controls) that need to be assessed. If you're taking it a step further for control compliance, then it will require validation and possibly testing. A 'framework' is so vague, but typically involves a charter of some sort, defining risk thresholds, risk acceptance processes, policy exceptions, etc.

like

How do you do it, now?

Dont reinvent the wheel. Is it a financial institution? Use FDIC intrex guidance. Not a bank? Maybe try ISACA cyber framework/cobit.

^Nope.

Consulting is fake it 'til you make it. Industry isn't. Learn all the frameworks you want, but if you're in CYBER type role, you'll need to manage and execute beyond the framework.

COBIT/NIST/ISO go study up

Concur with EY2. Also read up on the EUs newish cyber security law.

Related Posts

I have an interview for a KPMG Associate Director role and am currently a Senior Manager at PwC. Is this considered a lateral based on the two firms or is it a step up? Any idea what the pay range is for the AD role at KPMG?

like

My husband and I have been wanting to start “trying” for a baby for a while now. However, I’m unhappy in my current role and would like to make a jump somewhere else. I have a few early interviews lined up but it’s still early days and no telling where they’ll go. Is it silly to put off trying until I find a new job? On the contrary, is it problematic if I accept a new role down the line while a few months pregnant? Either route feels like a compromise. Appreciate any input from mamas out there.

like

Just learned from a colleague that they were selected for GS-13 off the street without an interview. Is this common?

funnylike

Hi everyone, I need your advice. I've been interviewing with MBB and Tier 2 firms over the past few years. However I was never well prepared for case studies. I now decided to take 6-8 months and seriously prepare for cases/mental math and try them again next year. I currently have Victor Chengs book and few others. What else would you recommend for me? How can i lay out a plan to study? Any source you can recommend free or paid?

like

Should I tell my boss I'm applying for jobs out of state, even though moving is contingent on getting a new job there? Especially since it's only January but there's already jobs up for interview...

like

Yale SOM invitation already? Submitted 3 days ago, just wow. Any advice on prepping? This is my first interview, and I just absolutely bombed the video essay pretty much stammering through and repeating myself the entire time, so really wasn't expecting this... For the record they do rolling, so no need to fret or anything if you yet to receive an invitation.

like

Hi friends & industry colleagues..anyone with interview experience with Adobe for Sr PM/PgM role ? What kind of preparation will help ? How many interview rounds expected & kind of questions if you can provide any insights ? Much Appreciate your help. Thanks!

like

Completely bombed an interview yesterday, and I’m ok with that. I realized how wildly unprepared I was and how I can make it better for the next ones I have lined up! It’s ok to fail and learn from mistakes. Also my kids were running around in the background so hopefully that wasn’t the reason 🤣

likefunny

Second interview with an agency today, this time with a couple team members. Give me the pep talk! Any pointers?

like

I’m looking for a job change, not instantly but in the near future, particularly in FANNG. I’m looking for a senior management position but coding is not my strongest asset. Does anyone have any advice? I want to study and prepare for the role and not just randomly keep applying..

like

I have an interview tomorrow with an ECD at an agency that is showing some red flags. But I’m at an agency now that is just one giant red flag and is driving me crazy. Do I take the jump to the other agency (if they offer me the job) or stick it out at my current job and hope something with no red flags comes along?

like

How granular are you supposed to get into the details of your resume during a 30 minute interview?

like

are there any good reference materials (or websites) for Deloitte case interview / behavioral interview for an experienced hire? 🙂

like

Has anyone interviewed with Avant and can provide some insight on the process and company?

like

Kpmg hi fishes, i have been offered to interview for the role of manager in KGS FDD Service line. Can someone please help me with any tips that might help me for the interview @kpmgglobal

What should I expect for the interview process for Accenture Federal at the Sr Analyst level? Thank you !

like

Best way to make why Deloitte interview question differentiated?

like

Anyone here have insight into Uber Health’s interview process? I have an initial convo with the recruiter but was wondering if anyone here knows more details. The position is implementation manager. Thanks!

like

I have an initial phone screen with Accenture coming up. Any advice on how to prepare/ what to expect? I am applying as a 2022 grad interested in the CDP.

like

Additional Posts

Can somebody please explain to me why MBB and other top consulting firms are so adamant that you have an MBA? I majored in accounting, finance, and operations management at a top 10 undergrad business school and then got my masters in information systems from the grad school program. I took multiple MBA courses as electives when getting my masters and it seemed like those classes were very basic and easy. Idk if I would learn anything in an MBA program that I hadn’t already learned in undergrad

like

How much is the salary difference between SA and SP in Slalom (Midwest)? I see glassdoor giving high number in SA level (much higher than I get) and I am hoping to get SP level in 2018

like

Is there an “ideal” time to interview?

like

Recommendations on getting COVID tests on Oahu?

like

What are you passionate about? Any tips on how to reflect on that? I feel like I’m spiraling into an identity crisis trying to think of my “story.” My work experience isn’t in any particular industry, and my personal life feels standard to millennials - food, travel, outdoor activities, art/culture

like

Wharton EMBA worth it? Late career starter so limited white collar experience but interesting background/past life. Also have kids to support so can’t do a full time program. Want the MBA for career boost ($), as an entry to faang/MBB and to have more security for future opportunities. Worth it? Does the EMBA have the same faang/MBB recruitment access and weight as full time?

like

Deloitte C&M (Customer and Marketing) hiring experienced roles. Reach out for referral if interested. Portfolio includes Digital Customer, Salesforce, Emerging Tech, Customer Strategy & Applied Design, and Advertising, Marketing & Commerce, etc. Resume required for referral.

like

What is the salary difference between an L10 Senior Recruiting Analyst and an L9 Recruiting Specialist??

like

I often use corporate rates for personal travel and in a sample size of 20 hotels across Hyatt and Marriott, I’ve only been asked for my work badge once at a Courtyard (or possibly Fairfield). I’m leaving my firm soon, but tempted to continue to use the corporate rate after I leave since they so infrequently check. Has anyone had any experience with this?

like

I'm getting my MBA from the University of Arizona, how prestigious is the AACSB accreditation? And do MBB or Big 4 Consultant firms care about it?

like

Junior lit associate interviewing for a junior transactional position. How I explain why I want to change practices? (I don’t really know what transactional attorneys do but I do hate my job lol). In all seriousness, I am applying because I have heard good things about the firm and like the practice area (land use).

like

Anyone who is on an H1B in consulting (strategy/ operations) tried visa transfer recently to Tech strategy roles? Wanted to understand if people have had a smooth sail or is there any reason to worry about timelines? Just can’t go on at McKinsey tbh. Thanks

like

Client came in wearing all black, moaning about Trump. 🍊

like

Hi fishes! Next week I have the last interview with partner at Deloitte. What would you recommend - some tips? Consulting, value creation unit.

like

Used Skiplagged to book a United flight. Hidden city on a one way saved $300 per person, so was worth it. I know conventional wisdom is to not connect to MileagePlus, but it should be fine if it's just one time, right? Seems like I could just say someone in my party felt sick so we missed second leg.

like

Anyone know the salary for a post MBA Associate at Bain & Company Sydney makes?

like

What’s your thought on moving from Morgan Stanley to Nomura? Title remains the same and a 30% salary increase

like

does anyone have any prep materials for Capital One’s sr business analyst case interviews? I have two weeks to prepare, but I haven’t done a case interview in a couple of years

like

Ops team zoom interview. A) jacket + tie? B) jacket? C) tie?

like

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
Download Fishbowl to see what others are saying
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the Fishbowl app

Get realtime notifications and see
what's happening in your industry
from the palm of your hand.

For account settings, visit Fishbowl on Desktop Browser or

General

Legal