Plan B Consulting

MAY 25, 2018

This week, I apply the PESTLE framework to business continuity, in response to finding other risk management frameworks too restricting. Over the last few weeks I have been thinking a lot about risk management frameworks for business continuity. A sudden legal process, such as a dawn raid or emergency court application b.

Risk Management 52

Risk Management Management All-Hazards Hazard 52

Plan B Consulting

MAY 25, 2018

This week, I apply the PESTLE framework to business continuity, in response to finding other risk management frameworks too restricting. Over the last few weeks I have been thinking a lot about risk management frameworks for business continuity. A sudden legal process, such as a dawn raid or emergency court application b.

Risk Management 52

Risk Management Management All-Hazards Hazard 52

Security Industry Association

APRIL 10, 2024

Pro Lock and Key Solutions Winner: dormakaba – Axessor Apexx IP Safe Lock Managed Services Winner: IronYun – IronYun Vaidio AI Vision Platform 8.0 Pro Lock and Key Solutions Winner: dormakaba – Axessor Apexx IP Safe Lock Managed Services Winner: IronYun – IronYun Vaidio AI Vision Platform 8.0

Security 119

Security Authentication Communications Asset Management 119

LogisManager

DECEMBER 12, 2023

Chief Risk Officers, Risk Committees, and Board Members need to be able to visualize the results of metric collection activities over time. This enables proactive risk management by identifying patterns, outliers, and potential areas of concern, allowing for strategic decision-making and resource allocation.

Strategic 59

Strategic Corporate Governance Risk Management Mitigation 59

LogisManager

DECEMBER 12, 2023

Chief Risk Officers, Risk Committees, and Board Members need to be able to visualize the results of metric collection activities over time. This enables proactive risk management by identifying patterns, outliers, and potential areas of concern, allowing for strategic decision-making and resource allocation.

Strategic 52

Strategic Corporate Governance Risk Management Mitigation 52

Zerto

DECEMBER 5, 2023

The Digital Operational Resilience Act (DORA) is a new regulation that creates a binding, comprehensive information and communication technology (ICT) risk management framework for the European Union (EU) financial sector. What Is DORA?

Disaster Recovery 52

Disaster Recovery Outage Banking Application 52

Pure Storage

JUNE 6, 2023

Once companies are required to be in compliance with DORA in early 2025, banks’ responsibilities for operational risks will expand to include protection, detection, containment, recovery, and repair capabilities against information and communication technologies (ICT) incidents. The key metric of success was a low cost of ownership.

Banking 97

Banking Resilience Financial Services Architecture 97

Security Industry Association

APRIL 5, 2024

The SIA RISE community invites you to apply for the 2024 Talent Inclusion Mentorship Education (TIME) program. Applications are due April 26; learn more and apply here. Here are the top things you need to know about our latest activities and resources, upcoming events and opportunities and more. Welcome, New Members!

Technology 59

Technology Security Consulting Activation 59

Fusion Risk Management

OCTOBER 26, 2023

Don’t miss your chance  to become one of the first users to  utilize  this exciting new capability!   The post Leveraging Fusion Resilience Copilot™ for enhanced resilience program management appeared first on Fusion Risk Management.

Resilience 59

Resilience Management Crisis Management Application 59

Risk Management Monitor

SEPTEMBER 30, 2022

Once it is safe to do so, risk managers will have considerable work to do to help their organizations and communities recover. “There are several ways to prepare to work with insurers and focus on recovery in the face of losses,” said Jill Dalton, the group managing director for Property Risk Consulting at Aon.

Insurance 75

Insurance Insurance Disaster Recovery Risk Management 75

Security Industry Association

MARCH 20, 2024

Where : Venetian 403 SIA Staff Contact : Ron Hawkins, director of industry relations ( rhawkins@securityindustry.org ) Intrusion Subcommittee Meeting The SIA Intrusion Subcommittee maintains and promotes standards dealing with residential and commercial intrusion panels and communication between protected premises and monitoring stations.

Education 64

Education Architecture Government Communications 64

Zerto

OCTOBER 20, 2022

When an organization understands the business context, resources that support critical functions, and related cybersecurity risks, it can focus and prioritize its risk management strategy and business needs. Response activities include planning, communications, analysis, mitigation, and improvements. Penetration testing.

Cybersecurity 52

Cybersecurity Management Internet Malware 52

Solutions Review

SEPTEMBER 27, 2021

AuditBoard also streamlines audit, risk, and compliance programs with an enterprise workflow engine purpose-built to automate interaction across those three lines. Enablon also allows users to establish, manage, and track Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) to better meet objectives. Navex Global.

Government 92

Government Audit Risk Management Hospitality 92

Reciprocity

DECEMBER 27, 2022

GRC is an integrated approach to managing the organization’s governance, IT and security risks, and regulatory compliance functions. The three pillars of a GRC program are governance, risk management, and compliance. Risk Management. Automate Vendor Risk Management. Governance.

Government 52

Government Audit Risk Management Disaster Recovery 52

Pure Storage

JULY 7, 2022

Whether public, private, or hybrid, the mass migration of workloads to the cloud, while potentially starting to slow down from its breakneck pace, has introduced new levels of complexity to application deployment and data protection. The key is to communicate early and often around your cloud migration plan. Application service.

Security 105

Security Architecture Application Banking 105

LogisManager

SEPTEMBER 21, 2021

This organization is required to submit evidence to auditors each quarter that demonstrates they are reviewing which employees have access to sensitive information within the applications they use. Managers completed thousands of reviews at a time, one by one, and relied strictly on memory for completing them on time.

Healthcare 96

Healthcare Audit Pandemic Risk Management 96

Risk Management Monitor

DECEMBER 8, 2022

The New York law requires that an insured defendant disclose information about any insurance policies sold or delivered in New York that could be applicable to a plaintiff’s claim. It is critical to keep claims adjusters informed and risk professionals should alert their adjustors before this disclosure is made.

Insurance 49

Insurance Insurance Alert Risk Management 49

Reciprocity

OCTOBER 1, 2022

As organizations and businesses around the world and across industries migrate their IT to the cloud, C-suites are faced with a new dilemma for governance, risk management and compliance (GRC) solutions: cloud versus on-premise software. That’s time and money that might be better spent elsewhere. GRC Software Solutions.

Government 52

Government Risk Management Internet Audit 52

Risk Management Monitor

MARCH 3, 2022

In a briefing yesterday, global risk consultancy Control Risks discussed some of the risk management considerations and steps companies need to take as the sanctions landscape continues to evolve. Which sanctions apply to your organization? What do you do as sanctions regimes evolve?

Banking 58

Banking Management Insurance Insurance 58

Pure Storage

MAY 2, 2024

Only grant users and applications the minimum amount of access needed to do their jobs, such as admins. Traditional perimeter-based security models focus on the perimeter, then assume trustworthiness of the user, device, or application once it’s within that perimeter. Implement least privilege. Assume a breach will occur.

Architecture 75

Architecture Authentication Audit Activation 75

Castellan

MARCH 22, 2022

Throughout the first season, Marling served as host of the “Leaders” episodes, chatting with industry leaders who shared insight and inspiration from their careers, including key takeaways applicable to modern organizations facing disruptions and other challenges to business as usual. But it’s not just about talking.

Resilience 111

Resilience Communications Business Continuity Disaster Recovery 111

Security Industry Association

NOVEMBER 14, 2023

Critical infrastructure and SIA members adapt to rapidly changing challenges, and the session highlighted a pressing need to empower risk managers and assessors to take a proactive role in these efforts, encouraging a more dynamic and responsive approach to security standards. More information about the program can be found here.

Security 64

Security Government Technology Application 64

Reciprocity

AUGUST 15, 2022

A compliance program helps a company to meet its legal requirements and to comply with applicable laws and regulations. So compliance risk management requires a complex web of compliance activities (from change management to compliance monitoring, and much more) to assure that all enterprise business units conform to applicable laws.

Management 52

Management Audit Banking Risk Management 52

Security Industry Association

MARCH 29, 2023

The prestigious Judges’ Choice Award was presented to IPVideo Corporation for the Sentry ERS product, submitted in the Emergency and Mass Communication Systems category. Onboard zigbee module provides integration with zigbee motion, door/window contact, lights, locks and environmental sensors with automated workflows.”

Security 52

Security Communications Technology Emergency Response 52

Fusion Risk Management

MARCH 1, 2022

Risk leaders should be prepared to experience a spike in the number of attempted cyberattacks as unavoidable data security breaches spill over globally and impact your third parties directly. appeared first on Fusion Risk Management. What if that same scenario lasted a month? Two months?

Manufacturing 52

Manufacturing Logistics Vulnerability Transportation 52

Fusion Risk Management

APRIL 28, 2022

In addition to traditional business continuity programs , companies must also be monitoring what the disruption means for their IT disaster recovery programs so that critical applications and equipment can be recovered effectively and efficiently to support the most important business services. Some companies rely on communication apps (e.g.,

Disaster Recovery 52

Disaster Recovery Communications Logistics Backup 52

Solutions Review

JUNE 9, 2023

They analyze applicable data protection laws and regulations such as the General Data Protection Regulation (GDPR) and create comprehensive privacy frameworks that align with organizational objectives. They collaborate with legal teams to navigate complex legal frameworks and mitigate potential risks.

Impact Analysis 52

Impact Analysis Authorization Mitigation Education 52

MHA Consulting

MARCH 23, 2023

Not Just for Banks FFIEC’s primary focus is on financial institutions, but its principles and standards are applicable to any company that wants to maintain a high state of resiliency, regardless of industry. The FFIEC standard can be found here, and it’s completely free.

BCM 74

BCM Impact Analysis Business Continuity Banking 74

Reciprocity

APRIL 4, 2022

A holistic view of the enterprise is essential to effective enterprise risk management. A good GRC solution helps to streamline business processes, even automating much of the work of risk management for you. 5 Key Benefits of GRC Programs for CISOs. An enterprise-wide view of assets and security challenges.

Audit 52

Audit Cybersecurity Risk Management Alert 52

Fusion Risk Management

JUNE 15, 2023

In the case that one data set is compromised, you can quickly assess which applications and services are impacted. How long can an application be down before, say, your revenue loss is too great? Define your impact tolerances Determine what magnitude of impact your organization can survive.

Resilience 52

Resilience Mitigation Crisis Management Business Services 52

Reciprocity

JANUARY 3, 2023

If you foster a solid security culture inside your organization, you will reduce risk from the start and be able to avoid future mistakes and catastrophes. Employees who understand the security environment are less vulnerable to phishing attempts and are aware of standard practices such as frequently upgrading devices and applications.

Security 52

Security Cybersecurity Vulnerability Risk Management 52

Security Industry Association

JANUARY 16, 2024

The 2024 SIA NPS award categories are: Access Control Software, Hardware, Devices and Peripherals – Wired Access Control Devices & Peripherals Hardware – Wireless Antiterrorism/Force Protection/Armed Aggressor Biometrics Commercial Monitoring Solutions Communications and Networking Solutions Convergence and Integration Solutions Countermeasures (..)

Security 64

Security Marketing Education Asset Management 64

Reciprocity

APRIL 4, 2022

On the contrary, they have several critical differences that security professionals should understand, if you want to deliver the best protection and risk management possible to your organization. The objective is to protect an organization’s information and communication technologies (ICT) from cyberattacks.

Cybersecurity 52

Cybersecurity Security Internet Malware 52

MHA Consulting

JUNE 22, 2023

Many operations require integrations such as communication or data flowing between departments. Ordinarily, such communication is accomplished automatically. One thing we often see is that when the system goes down and the manual workaround is implemented, the integration and communication part gets left out.

Vulnerability 85

Vulnerability Outage Capacity BCM 85

Erwood Group

JULY 12, 2022

Risk Assessment Key Findings. Crisis Management Levels. Crisis Communications. Internal & External Communications plans & templates. At a minimum, one identified method of communication is always available including email/instant message, land-line telephones, and cellular telephones. Notification.

Continuity Planning 114

Continuity Planning Business Continuity BCP Disaster Recovery 114

Security Industry Association

MARCH 23, 2022

Communications and Networking Solutions. Emergency and Mass Communication Systems. Winner: LiftMaster – myQ Community Web Platform + Mobile App 2.0. Threat/Risk Management Software Applications. Winner: Axis Communications, Inc. Winner: Hakimo – Hakimo Alarm Monitoring 2.0. Smart Home Solutions.

Security 105

Security Technology Communications Asset Management 105

Security Industry Association

SEPTEMBER 20, 2022

Grant applications due by November 15, 20022. Last week the Department of Homeland Security (DHS) announced a joint effort between the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Emergency Management Agency (FEMA) to provide new cybersecurity grants authorized and funded under the Bipartisan Infrastructure Law.

Cybersecurity 52

Cybersecurity Telecommunications Government Authentication 52