Articles
Tag: it grc
-
Forget About Being Right, Focus on Being Defensible
Shouldn't the defensibility of a process for managing information require designing the process with info mgmt best practices in mind? Short answer: nope.
Continue reading...
-
Time (Again) for the IIA Standards to Be Corrected
IIA standards need to be updated so audit providing assurance on enterprise-level risks, not what matters to middle management alone.
Continue reading...
-
The Cost of a Cyber Breach
Deciding how much to invest in cybersecurity requires considering the likelihood of achieving objectives given all sources of risk, not just cyber.
Continue reading...
-
7 Strategies to Stop Shadow IT in Its Tracks
There's a way to put an end to shadow IT that respects people's needs for functionality and access to information.
Continue reading...
-
Becoming a Data-Driven Enterprise Requires Playing Offense and Defense
While most leaders understand the benefits of fully leveraging data, many struggle with how to turn it into usable insights.
Continue reading...
-
A Board That Would Fail Any Test of Its Governance Practices
Ten principles for what constitutes effective oversight of risk management by a board.
Continue reading...
-
The Positive Side of Risk
If we can’t agree on what the terms risk and opportunity mean, how can we have a constructive conversation?
Continue reading...
-
The Problem With Software for GRC
Even if it were possible to have one piece of software that included everything in GRC, very few companies claim to have integrated their related technologies.
Continue reading...
-
Are We Taking Risk, Making a Decision or Gambling?
What's the difference between taking a risk, making a decision or gambling?
Continue reading...
-
Finding the Signal in the Noise in the Security World
One of the biggest challenges we face in the world of cybersecurity is how to pinpoint the one-in-a-million issues we really need to address.
Continue reading...
-
10 Keys to Microsoft Teams Governance Success
Managing a Microsoft Teams environment is no easy task, so be sure you have governance measures in place.
Continue reading...
-
What if You Just Ignored the GDPR?
What if the cost of complying with GDPR exceeded the fines?
Continue reading...
-
Transforming Risk Management in 2019 and Beyond
Will 2019 be the year we finally drop the word "risk" from risk management?
Continue reading...
-
People Still Don't Know How to Assess Cyber Risk
By continuing to view cyber risk inside a silo, businesses are making uninformed decisions based on limited information.
Continue reading...