While it may sound straight forward there is more to creating an effective external communication policy than meets the eye. Deon Binneman digs deeper into this vital area of risk management and provides a useful checklist.
The Software Engineering Institute (SEI) has released the latest model in its Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE) suite. The OCTAVE FORTE (OCTAVE For the Enterprise) model for enterprise risk management helps executives and other decision makers understand and prioritize the complex risks affecting their organizations.
The Institute of Internal Auditors (IIA) has published ‘OnRisk: A Guide to Understanding, Aligning, and Optimizing Risk 2021’ which examines the views of those who most directly involved in risk management – boards, executive management, and internal audit.
RiskRecon, a Mastercard Company, and the Cyentia Institute have published an in-depth study that explores the current state of third-party risk management (TPRM) programs and practices. The research found that TPRM professionals increasingly do not trust that security questionnaires provide sufficient information to properly understand and act on their third-party risk.
During ‘Audit & Beyond’, AuditBoard’s second annual user conference, more than five thousand audit, risk, and compliance professionals virtually convened for two days to discuss the dynamic state of risk in 2020 and its associated challenges.
With shoppers looking ahead to the busy festive season, PCI Pal, the global provider of cloud-based secure payment solutions, has released a new study that shows data security concerns will influence how and where people make their purchases this year.
COVID-19 has reorganized the risk landscape for chief audit executives (CAEs), and CAEs have listed IT governance as the top risk for 2021, according to Gartner. Analysts say that the pandemic is giving rise to new sets of risks while exacerbating long-standing vulnerabilities.
We’re told that, in a modern market landscape, each business process should add value. But is there really competitive advantage in risk management – and how can this be optimised? Dr. Iain Brown makes some suggestions…
For the past 30 years, enterprise risk management (ERM) programs have helped organizations proactively identify and address risks, however, many times it provides limited insight into strategy and strategic risks, according to a new RIMS report, ‘Pivoting from ERM to SRM’.
The entire Continuity Central website is scanned daily by Sucuri to ensure that no malware exists within the site. This means that you can browse with complete confidence.
Business continuity can be defined as 'the processes, procedures, decisions and activities to ensure that an organization can continue to function through an operational interruption'. Read more about the basics of business continuity here.
