This is a podcast episode titled, A Conversation on Risk Quantification. The summary for this episode is: <p><span style="color: rgb(0, 0, 0); background-color: transparent;">Dustin Owens’ extensive background in GRC began with an undergraduate degree in computer information systems.&nbsp;</span></p><p><span style="color: rgb(0, 0, 0); background-color: transparent;">When he realized programming </span><em style="color: rgb(0, 0, 0); background-color: transparent;">wasn’t</em><span style="color: rgb(0, 0, 0); background-color: transparent;"> his professional calling, he transitioned to the security and cybersecurity space — now, he’s accrued 25 years of experience in the field.&nbsp;</span></p><p><span style="color: rgb(0, 0, 0); background-color: transparent;">After being introduced to risk quantification in 2003 as part of the National Security Agency’s INFOSEC Assessment Methodology, Dustin hasn’t looked back.&nbsp;</span></p><p><span style="color: rgb(0, 0, 0); background-color: transparent;">As LogicGate’s Principal GRC Architect, he focuses heavily on how risk quantification can help obtain consistent risk findings that are accurately defined in monetary terms.</span></p><p><span style="color: rgb(0, 0, 0); background-color: transparent;">In this episode of GRC &amp; Me, Dustin breaks down why organizations have much to benefit from adopting risk quantification practices to better assess, manage and respond to risk. Plus, it helps organizations better prioritize the activities that require more attention and investments.</span></p><p><span style="color: rgb(0, 0, 0); background-color: transparent;">“It makes it very easy to compare risk mitigation activities and whether they do risk acceptance or transfer risk, based on the amount of impact that that risk has to the business,” explains Dustin,” which allows organizations to “see if it makes sense to go in one direction versus another.”</span></p>