Articles
Tag: it grc (page 3)
-
2018 Contributors of the Year: Dana Simberkoff
A profile of one of CMSWire's top contributors of 2018, Dana Simberkoff.
Continue reading...
-
Who Is Taking the Cyber Risk?
When we look at who in an organization assumes cyber risk, it's everyone who touches it.
Continue reading...
-
Should the Chief Privacy Officer and Chief Information Security Officer Roles Merge?
Given the changing global regulatory landscape it's not surprising to see privacy and security roles merging.
Continue reading...
-
A Basic Principle Most People Don't Understand About Risk
Can you limit your risk assessment to one exact point? Risk carries a range of potential outcomes.
Continue reading...
-
How Much Information Security Is Enough?
Businesses need to strike a balance between security requirements and the need to move forward with transformation efforts.
Continue reading...
-
Compliance Is a Business Decision
Deciding whether to comply with regulations and laws is a choice based on potential risk and value, not “comply at all costs.”
Continue reading...
-
Uniting Risk Management With Strategic Planning
By only offering executives a list of possible negative outcomes, risk managers fail to consider the potential positive outcomes a decision might have.
Continue reading...
-
Emerging Risks: Who Is Watching?
Whose job is it to identify, assess and react to risks? If you responded with anyone other than management, read on.
Continue reading...
-
Is There an ROI for Investing in Information Security?
Is there a return on investing in cyber or is risk just the cost of doing business?
Continue reading...
-
Do You Understand What a Risk Event Is?
People discuss risk events as if the outcome will always be negative. That's not the case.
Continue reading...
-
Is It Really All About Culture?
When using the word "culture" we should always use a modifier.
Continue reading...
-
What Are the Core Competencies of an Effective Risk Officer?
A friendly argument with a friend revealed a big disagreement over the qualities a risk officer should possess.
Continue reading...
-
My Cybersecurity Confession
Cybersecurity is clearly a priority for many, but let's not kid ourselves how effective our security plans are.
Continue reading...
-
How to Get Employees On Board With Security Changes
A company has every right to insist on new security protocols, but handle the transition right or the change won't take root.
Continue reading...