More From Security – Page 3
-
ArticleThe GRC Red Flag Series – Excerpts from G(P)RC: How GRC Drives Performance in Banking & Finance
Excerpts from the panel discussion in the GRC Red Flag Series episode on September 15th, 2022, featuring Michael Rasmussen, GRC Pundit, GRC 20/20, Anja Ugedahl, Head of Business Performance Management-Sparebank 1 Nord-Norge, and Owe Lie-Bjelland, Director of GPRC Program, Corporater.
-
TrainingISO/IEC 27001:2022 and ISO/IEC 27002:2022, and how they affect your organisation
ISO/IEC 27001:2022 is the newest iteration of the international standard that sets out the specifications for an ISMS (information security management system).
-
VideoPrivSec Dublin 2022 highlights
PrivSec Dublin covered the most pressing and challenging topics from across the data protection, privacy and security sectors.
-
ArticleAre You Ready For the Proposed Cyber Resilience Act?
The EU Commission’s proposal for a new Cyber Resilience Act (CRA) aims to safeguard consumers and businesses buying or using products or software with a digital component.
-
VideoThe GRC Red Flag Series: G(P)RC - How GRC Drives Performance in Banking & Finance
Access the on-demand video for The GRC Red Flag Series with Michael Rasmussen: G(P)RC - How GRC Drives Performance in Banking & Finance
-
VideoHow to Manage Third-Party Risk in Your Supply Chain
Supply chain risks take many forms and can be devastating to your organisation if not properly mitigated. From cybersecurity to reputational and legal issues, managing risk among your vendors and other third parties can be a daunting task.
-
VideoKeeping Pace with Emerging Threats
Cyber criminals are leveraging innovative techniques and taking advantage of new security vulnerabilities. Organizations must evolve and adapt their defenses to protect against the next wave of cybersecurity threats.
-
VideoThe human element: Fixing the behaviors that lead to breaches
Cybercriminals continue to launch increasingly sophisticated social engineering attacks. Coupled with a rise in human error, it’s no surprise that 85% of today’s security breaches involve a human element.
-
VideoChoosing the Right Cybersecurity Framework
Implementing a cybersecurity framework is a great way to improve your company’s security posture. But there are a lot of frameworks to choose from, and their suitability varies depending on your company’s industry, size and resources.
-
VideoHow to Avoid Software Supply Chain Attacks
From Solarwinds to Kaseya to Log4j—the security risk from software supply chain attacks shows no sign of abating.
-
-
VideoWhy Effective Process and Governance is as Important as Technology When IAM issues arise
When IAM issues arise, organizations often lean too heavily on implementing technology with the idea that it will solve all issues related to identity and access.
-
VideoDigital Identity: Will We Ever See a World Without Passwords?
Even with good password management techniques, passwords are a flawed approach to account security. Many of the world’s major tech companies are proposing alternative mechanisms to verify identity and manage access. But what works best—and are there privacy trade-offs?
-
VideoVendor Risk Management: Can You Trust Vendor Risk Questionnaires?
Vendor risk management questionnaires are often seen as a vital part of the TRPM due diligence process. But how far can you trust your vendors’ responses?
-
Q&AAn Interview with Holly Butterworth, Regional Vice President Delivery, UK & NA at Camms
Holly Butterworth heads up the Camms Services Delivery team in the UK, Europe and North America, leading software implementations in governance, risk, compliance, project and strategic management.
-
Q&AAn Interview with Alecia Futerman Associate Director at Control Risks
Alecia Futerman talks about how she has flourished in the male-dominated world of GRC
-
FeatureMeet the expert: Puja Verma to speak at PrivSec Focus: Third-Party Risk
We are delighted to announce that legal specialist, Puja Verma will be speaking at PrivSec Focus: Third-Party Risk.
-
FeatureMeet the expert: André H. Paris to appear at PrivSec Focus: Third-Party Risk
Data privacy and compliance consultant, André H. Paris will be speaking at PrivSec Focus: Third-Party Risk.
-
NewsIT response plans lacking despite increasing ransomware threat
While the majority of state and local IT leaders in the US consider ransomware and associated cyber-risks to be an ongoing threat to their organisation, almost half of private and public sector entities are yet to put appropriate incident response plans in place.
-
VideoImproving Organisational Resilience
PrivSec Risk in Focus will consider the best practices for managing overall organisational resilience and ask risk management experts what they’ve learned from the past few chaotic years.