risk management
Security in Digital Transformation: Think of It as Risk Management
You know something has gone mainstream when you see it featured in a television commercial. I noticed it with cybersecurity and then with cloud computing, and the other night, I saw a ...
My Experience with the DoD Version of the RMF
Anyone out there dealing with the DoD implementation of the NIST 800-37 RMF? Just in case, it’s the “Guide for Applying the Risk Management Framework to Federal Information Systems” developed by the ...
Cyber Incident Risk: From IT Headache to Business Threat
In the digital transformation era, the growing number, sophistication and severity of cyber attacks can pose a dire threat to an organization?s entire business. Unless IT and business teams work together to ...
Rallying the Troops for GDPR
The EU GDPR continues to drive organizations to change their processes. No where is this more apparent than in the risk assessment piece. It?s a new risk-based approach ...
Should Security be Involved in Anti-Counterfeiting Program?
Q: We think we can be of assistance in the organization’s product counterfeiting mitigation program. How might we approach this? A: Companies approach the issue of brand protection, and specifically the problem ...
Four Cyber Security Risks and How to Address Them
Security should be at the top of the mind for any organization. It has been estimated that damages from cyber crime would cost around $6 trillion annually by 2021. With growing threats ...
Preventing ‘Unexpected Change Syndrome’ with Change Management
According to the Mayo Clinic, plaque in your arteries and inflammation are usually to blame for coronary artery disease. Left unchecked, plaque buildup narrows arteries, decreasing blood flow to your heart and ...
Forget C-I-A, Availability Is King
In the traditional parlance of infosec, we've been taught repeatedly that the C-I-A triad (confidentiality, integrity, availability) must be balanced in accordance with the needs of the business. This concept is foundational ...
Building a Consistent Employee Protection Program
Q. My company has no consistent executive protection and event security program. Any advice on how to build out a program that will allow us to better support the executives and our ...
