Articles
Tag: it grc
-
A Simple Risk-Driven Decision Technique
A process I learned in my youth
Continue reading...
-
Striking the Security and Enterprise Collaboration Balancing Act
Organizations need solutions, processes and cultures that foster an ongoing dedication to information security without getting in the way of productivity.
Continue reading...
-
Even the Best Laid Plans Forget This Security Gap
The risks and potential liability of ineffective data destruction at end of life are too high for organizations to risk.
Continue reading...
-
The Risks and Consequences of Information Mismanagement
In so many cases, information mismanagement isn't a failure of technology so much as a failure of management to understand and take the necessary action.
Continue reading...
-
The Evolution of Internal Audit
How agile is your internal audit team? Do you have speedboats or only battleships?
Continue reading...
-
Securing Sensitive Information in the Cloud Comes Down to Access Management
When it comes to data security, most organizations worry about external actors, when what they really should worry about is the threat from within.
Continue reading...
-
Should We Audit at the Speed of Risk?
The annual audit plan is typically out-of-date even before it is approved by the audit committee.
Continue reading...
-
Why Taking on More Strategic Risk Can Be Fuel for Growth
Risk doesn't have to be scary or negative. Instead you should view it as fuel for growth.
Continue reading...
-
How Do You Make Decisions?
How can we, the "risk" managers, help leaders make informed and intelligent decisions that consider all the things that might happen?
Continue reading...
-
Stop Phishing With Employee Training
Phishing attempts are up as people are forced to work from home, so training your staff on how to spot phishing attacks is crucial.
Continue reading...
-
How Will Risk Management Change as We Emerge From This Crisis?
Even before the crisis, few in executive management believed their risk management programs were helping them run the organization for success.
Continue reading...
-
Risk Practitioners Should Be Asking 'How Can We Help?'
We may have a business card that says we are internal auditors. But we are part of the management team and our first duty is to help the organization succeed.
Continue reading...
-
Should You Boast About Internal Audit Value?
Value is what people would be willing to pay for, not what you say it is. The same applies to internal audit.
Continue reading...
-
Risk, Consequences and the Domino Effect
Risk management is not about managing the possibility of harmful events or situations. It’s about managing the likelihood and extent of success.
Continue reading...
