Wednesday, January 20, 2021

Six Habits of Merely Effective Negotiators by James K. Sebenius

Longer read but good article

https://hbr.org/2001/04/six-habits-of-merely-effective-negotiators?utm_medium=email&utm_source=circ_other&utm_campaign=subbenemail_20210117&hideIntromercial=true&tpcc=subbenemail&deliveryName=DM114990


Condensed snippet
  • As the pressure mounts, people often get deadlocked, leave money on the table, or allow conflict to spiral out of control
  • It's to understand the other party's interests and get him to choose what you want—for his own reasons
  • The first bad habit is neglecting the other party's concerns
  • It's tempting to say: "That's the other side's issue. Let them handle it. We'll look after our own problems."
  • But that's not being tough, as some negotiators might think. It's being shortsighted
  • If you don't see the deal from the other side's perspective, you can't solve their problems, which will hurt your chances of solving your own
  • If you want to change people's minds, you need to learn what they're thinking
  • A second bad habit is focusing too much on price
  • The hard-bargaining tactics that many negotiators use often leave potential gains unrealized
  • Even though price is important in deals, it's rarely the only factor
  • Emotional factors are just as important as economics in most deals
  • They focus on four factors besides price:
    • A strong working relationship with the other party
    • Shared expectations about the nature of the partnership
    • A respectful, straightforward, and fair process
    • And the interests of all the players who might affect the deal
  • It's not uncommon for merger negotiations to be torpedoed by people who were not at the bargaining table—such as investors, regulators, or key internal stakeholders
  • A third negotiating pitfall is concentrating too much on where the two parties stand on the issues
  • Skilled negotiators look at the underlying interests that are driving people to take their positions
  • If you see negotiation as a way of reconciling these, you can find solutions that address both parties' concerns
  • Negotiators often strive to craft win-win agreements by searching for common ground
  • Though common ground is generally a good thing, becoming too focused on it can be a mistake. This is the fourth bad habit
  • Differences in priorities are among the most frequently overlooked sources of value in negotiations
  • The fifth bad habit is neglecting your best alternative to a negotiated agreement—what's known as your BATNA
  • Essentially, it's the course you'll take if you decide to walk away from the table
  • The stronger this other option is, the more bargaining power you have
  • The sixth bad habit of negotiators: failing to correct for the biases that may be clouding their vision
  • Research shows that people unconsciously portray their own side as more talented, honest, and moral than it is, while vilifying the opposition
  • This leads to exaggerated perceptions of the other side's positions
  • And such views tend to be self-fulfilling prophecies. If you cling to the idea that the other side is stubborn or extreme, you're likely to trigger that behavior
  • Second, we all have a tendency to interpret information about our position in a self-serving way
  • What can you do to correct your vision? There are a few things
  • First, just recognizing that you're prone to biases will help
  • It's also useful to seek the views of disinterested outside parties
  • And you can readjust your perspective by having some people on your team prepare the strongest possible case for the other side
  • To become a top-notch negotiator—not a merely effective one—you'll need to correct the six bad habits
  • That means you'll take into account the other party's perspective, factors other than price, compatible interests, value-creating differences, the best alternatives on both sides, and any biases that could be skewing your vision

Wednesday, January 13, 2021

Understanding the Cost of a Breach - Wall Street journal

Interesting quotes and snippets from WSJ Pro Research article by Bob Sloan:

  • The costs involved in resolving an incident can be significant, with research showing costs in the U.S. are more than twice the global average at $8.64 million
  • System downtime following a data breach, ransomware incident or denial of service attack is often the largest single factor in the overall cost of a breach. 
  • The Ponemon Institute's Cost of a Data Breach Report for 20202 is the 15th annual survey detailing the costs associated with cyber attacks that result in a data loss event as a result of a remote cyber attack by a foreign state or criminals, a deliberate theft by a malicious insider, or employee negligence 
  • The Ponemon Institute study found businesses with over 25,000 employees incurred average breach costs of $4.25 million, while breaches at organizations with 5,001-10,000 employees actually cost more ($4.72 million). 
  • Breaches that result in the loss of customer data records can more easily be compared than those where the attacker's aim is to disrupt and extort a business. 
  • Over the last 12 months the ransom cost alone has increased steeply to almost $234,000, though some victims are paying seven- and eight-figure ransoms. 
  • Unplanned system downtime can be part of a data breach incident, but is the hallmark of a ransomware attack and is the solitary aim of denial-of-service attacks. Coveware assessed the average system downtime of a ransomware victim in Q3 2020 to be 19 days10, an increase of 19% over the previous quarter and up from 12.1 days in Q3 of 2019. 
  • Lost business, which includes customer turnover, lost revenue and the increased cost of acquiring new business as a result of the reputational hit taken by the victim, is the single largest cost factor in a data breach--40% of the average total cost representing $1.52 million12 according to the Ponemon Institute. NetDiligence research puts the figure for lost income for SMEs at an average of $343,000 for breaches that occurred between 2014 and 2018, though the median of $45,000 suggests some very large losses skewed the average costs upwards 
  • Perhaps the least public of all attacks are the stealthy operations carried out by nation states. The aim in most cases is to steal trade secrets or intellectual property without being detected and these are among the costs most difficult (though not impossible) to assess. IP can constitute over 80% of a company's value today14, but its loss may not cause any financial impact to the victim. 
  • Across all companies surveyed, 61% of total breach costs were incurred during the first 12 months, but this fell to 44% of costs in highly regulated industries. Companies operating in the retail, industrial, entertainment sectors (among others) had incurred 92% of costs within two years, while those in the energy, health or financial sectors (among others) incurred 15% of costs after two years. 
  • The negative impact was found to hit a low point around 14 days after the breach announcement, falling on average 7.27%, but had (on average) recovered after six months23. The longer term impact (up to three years) was more difficult to establish and research findings differ, though most agree the effect diminished in the long term. 
  • There is a lack of research on this subject. Sample sizes of studies tend to be reasonably small and those companies involved tend to be larger. 'Mega-breaches' involving the loss of tens or hundreds of millions of customer records can skew average figures and create substantial differences between mean and median costs. There is no single methodology for estimating costs, meaning different studies can produce very different results. 
Source: Understanding the Cost of a Breach 

Rob Sloan, Research Director, WSJ Pro