Articles
Tag: norman marks
-
The Cost of a Cyber Breach
Deciding how much to invest in cybersecurity requires considering the likelihood of achieving objectives given all sources of risk, not just cyber.
Continue reading...
-
A Board That Would Fail Any Test of Its Governance Practices
Ten principles for what constitutes effective oversight of risk management by a board.
Continue reading...
-
The Positive Side of Risk
If we can’t agree on what the terms risk and opportunity mean, how can we have a constructive conversation?
Continue reading...
-
The Problem With Software for GRC
Even if it were possible to have one piece of software that included everything in GRC, very few companies claim to have integrated their related technologies.
Continue reading...
-
Are We Taking Risk, Making a Decision or Gambling?
What's the difference between taking a risk, making a decision or gambling?
Continue reading...
-
Transforming Risk Management in 2019 and Beyond
Will 2019 be the year we finally drop the word "risk" from risk management?
Continue reading...
-
Stop Managing and Start Taking Risks
Risk isn't something to be managed, it's something to study to establish the positive or negative effects it will have on business objectives.
Continue reading...
-
Who Is Taking the Cyber Risk?
When we look at who in an organization assumes cyber risk, it's everyone who touches it.
Continue reading...
-
A Basic Principle Most People Don't Understand About Risk
Can you limit your risk assessment to one exact point? Risk carries a range of potential outcomes.
Continue reading...
-
Uniting Risk Management With Strategic Planning
By only offering executives a list of possible negative outcomes, risk managers fail to consider the potential positive outcomes a decision might have.
Continue reading...
-
Emerging Risks: Who Is Watching?
Whose job is it to identify, assess and react to risks? If you responded with anyone other than management, read on.
Continue reading...
-
Do You Understand What a Risk Event Is?
People discuss risk events as if the outcome will always be negative. That's not the case.
Continue reading...
-
Is It Really All About Culture?
When using the word "culture" we should always use a modifier.
Continue reading...
-
What Are the Core Competencies of an Effective Risk Officer?
A friendly argument with a friend revealed a big disagreement over the qualities a risk officer should possess.
Continue reading...