Remove Asset Management Remove Audit Remove Authorization Remove Cybersecurity
article thumbnail

The Colonial Pipeline Hack: Failure in Risk Management

LogisManager

This is especially important when considering the additional scrutiny and cost of SOC II and regulatory audits that are based largely on the strength of an organization’s ERM program. Asset Management. About the Author: Steven Minksy. Risk Assessments & User Access Reviews.

article thumbnail

Adversarial Risk Management

FS-ISAC

You can hire a professional audit firm to benchmark the bucket against peer buckets. We chase concepts that seem simple, such as "basic" network hygiene, asset management, and patching. But these approaches rely on tenets based on traditional operational and financial risk management. Or you could fill it with water.