Research by Alina Andronache from the Brunel Business School, Brunel University, looks at the reasons why financial sector organizations should consider aligning cybersecurity management with enterprise risk management and proposed a framework for achieving this.
A new resource from ISACA, ‘Managing Third-Party Risk: Cyberrisk Practices for Better Enterprise Risk Management’ provides information and advice to help organizations better manage third-party IT risks.
The Q2 Assessment of Business Cyber Risk (ABC) report released by the US Chamber of Commerce and FICO recorded a National Risk Score of 688, a slight improvement over the previous quarter's score of 687.
A survey of UK GDPR decision-makers conducted on behalf of Egress, has found that 52 percent of businesses are not fully compliant with the regulation, more than a year after its implementation. The survey also found that 37 percent of respondents had reported an incident to the ICO in the past 12 months, with 17 percent having done so more than once.
New GRC survey uncovers mixed levels of executive confidence in organizations’ ability to manage risks, map ownership and identify third-party vulnerabilities.
A Gartner survey of more than 250 legal and compliance leaders reveals that the standard point-in-time approach to risk management is no longer effective in today's landscape of fast-paced, rapidly changing business relationships.
ASIS International has published a new guidance document for enterprise security risk management (ESRM), claimed to be the first strategic security management tool of its kind, ‘elevating the security function by establishing a partnership between security professionals and business leaders to manage security risks’.
The need for cyber due diligence in a merger or acquisition of a business is more relevant than ever before. Connor Lattimer, Associate Director at Control Risks, explores the subject, and offers some pointers for risk managers.
In an article on the Airmic website, Kasper Nielsen, chief strategy officer at the Reputation Institute, says that most organizations still don't understand how to manage their reputation.
"The problem with some ERM frameworks," says Kasper Nielsen, "is that they are two dimensional, focusing only on cost and likelihood.
The entire Continuity Central website is scanned daily by Sucuri to ensure that no malware exists within the site. This means that you can browse with complete confidence.
Business continuity can be defined as 'the processes, procedures, decisions and activities to ensure that an organization can continue to function through an operational interruption'. Read more about the basics of business continuity here.
