How CRQ creates value beyond cyber

In-Person , up to 2 CPE for attendance. Wednesday 6th May 2026, 6-9pm UK time

Title: How CRQ creates value beyond Cyber

Form: In Person. Up to 2 CPE for attendance.

Synopsis:

This ISACA session is designed for practitioners who want a clear, practical view of how cyber risk quantification (CRQ) progresses from a pilot exercise to a capability that is operational, trusted and used across the business.

Building on the foundations of our session in September last year, this event focuses on what comes next: how organisations start to embed CRQ, engage broader stakeholders, and integrate quantified outputs into day‑to‑day planning and reporting.

Agenda:

• 17:45 pm – 18:45 pm – Registration and networking (food and drinks)
• 18:45 pm - Introduction by ISACA London Chapter
• 18:45 pm - 20:15 pm – Presentation by Elizabeth Huthman, CRQ Advisory Director, KPMG CRI and Chris Siswick, Senior CRQ Delivery Manager, KPMG CRI
• 20:15 pm - Open for Q&A
• 20:30 pm – Event close

Key Takeaways:

The session will cover:

• How organisations mature CRQ beyond the initial pilot
• Practical steps for engaging COOs, CFOs, CROs and other stakeholders
• How to maintain models, assumptions and inputs as operational realities change
• How quantified outputs support wider reporting and planning cycles

Lessons from early adopters who have built confidence with boards and executives.

Speaker Details:

Speaker 1: Elizabeth Huthman, CRQ Advisory Director, KPMG CRI
Liz is a CRQ Advisory Director at CRI. With over 16 years of experience working with clients across industries such as private equity, retail, and legal services, Liz is dedicated to managing cybersecurity. Based in London, Liz is passionate about helping clients prioritise their cybersecurity investments based on their specific risk profile.

Speaker 2: Chris Siswick, Senior CRQ Delivery Manager, KPMG CRI
Chris is a Senior CRQ Delivery Manager at CRI. With a diverse background in risk and technology, Chris began his career assessing and communicating tactical risks from the use of artillery systems. Now, Chris focuses on helping clients uncover cyber risks within their businesses. Based in London, Chris is passionate about bridging the gap between security teams and non-technical leaders to build understanding.

Any questions?

Please contact admin@isaca-london.org