LogisManager

DECEMBER 20, 2021

These functionalities also streamline your audit program by facilitating resource assessment and management. Completing all of your work within LogicManager automatically builds a sound, time-stamped audit trail , making it easy to generate reports and dashboards for inquiring minds. LEARN MORE Report.

Audit 52

Audit Benchmark Mitigation Evaluation 52

Fusion Risk Management

AUGUST 17, 2021

Ask yourself one question: when is the last time I updated my third-party risk management policy and presented it to the board for approval? Fortunately, industry surveys consistently show that about 2/3 of institutions make it an annual practice. Having a well-constructed set of guidelines will save you every time.

Management 52

Management Audit Outsourcing Risk Management 52

Security Industry Association

OCTOBER 14, 2022

Of course, there are some typical “security” use cases, but the real value extends far beyond the walls of the physical security department and presents us with an opportunity to start transforming our team and systems from a “cost center“ to a “business enabler,” which naturally brings many benefits back to the security team (e.g.,

Security 96

Security Accreditation Audit Asset Management 96

IT Governance BC

OCTOBER 17, 2019

A good auditor will use the checklist as a summary at the beginning or end of their audit, with a more detailed assessment in their report, or they’ll use a non-binary system that doesn’t restrict them to stating that a requirement either has or hasn’t been met. They allow cost-cutting to starve the audit. Good auditing practices.

Audit 64

Audit Accreditation Consulting Government 64

Solutions Review

SEPTEMBER 8, 2023

There is a blind spot present – a gaping hole. Audit logging misconfigurations make it more difficult for the organization to detect brute force attacks and spot anomalous behavior patterns. These are just a few of the many security challenges that are present within enterprise infrastructure.

Cyber Resilience 105

Cyber Resilience Backup Resilience Vulnerability 105

Pure Storage

FEBRUARY 21, 2024

Singapore, Hong Kong, and Australia present particularly good examples, but no jurisdiction is ignoring this area. A plan to meet the regulatory requirements as well as an audit regime were required by June 2023 and a first audit must be completed by June 2024.

Financial Services 59

Financial Services Resilience Audit Authorization 59

Pure Storage

FEBRUARY 7, 2022

Why it’s being stored—including if there are legal or regulatory reasons for doing so, such as audits or tax reasons, historic or research purposes, etc. The reason for this is that data sitting in archives or graveyards presents more risk for security breaches. Anonymization and encryption policies that will be used.

Backup 119

Backup Audit Architecture Security 119

Reciprocity

OCTOBER 1, 2022

Be aware, however, that certification is evaluated and granted by an independent third party that conducts the certification audit. Once the ISO 27001 audit is complete, the auditor gives the organization a Statement of Applicability (SOA) summarizing its position on all security controls. Why Is an ISO 27001 Checklist Essential?

Gap Analysis 52

Gap Analysis Audit Security Asset Management 52

KingsBridge BCP

MAY 12, 2023

S2E10 (Part 2) - The BCP Audit Get the details on Pre-Audit Planning, the 4 layers of Preparing your Audit Program, and what should be included with an Audit Report (more than just the report!). FYI: this 4-issue approach we use is a simple and remarkably effective way to build your BCP!

BCP 40

BCP Audit Business Continuity Continuity Planning 40

Fusion Risk Management

JANUARY 5, 2023

A key focus has been on technology and data service providers (TSPs) , as cyberattack incidents such as SolarWinds and Log4j have proven that third parties present risks that significantly impact important business services. Audit Access. Oversight Framework. Information Sharing.

Resilience 52

Resilience Financial Services Audit Outsourcing 52

Security Industry Association

OCTOBER 27, 2021

Now stakeholders will start to realize that physical security may not comply with many policies and guidelines as they start to get audited (by either internal audit or third parties). Embark on educational programs to acquire the knowledge and skills needed to hold meaningful dialogue with IT stakeholders.

Cybersecurity 96

Cybersecurity Audit Government Manufacturing 96

Pure Storage

JANUARY 10, 2024

Secure replication processes: Maintaining strong security protocols during automated replication ensures compliance with regulatory standards and facilitates easier auditing. These complexities revolve around processes and policies driven by the customer, thereby customizing the solutions into complex process and change management platforms.

Disaster Recovery 52

Disaster Recovery Strategic Change Management Technology 52

LogisManager

MAY 9, 2023

Companies may use a rearview approach of GRC to selectively find and present information that supports their current practices, rather than adopting a forward-looking approach of Enterprise Risk Management (ERM) to proactively identify and address potential risks and adapt as the market and their customer’s behavior evolves.

Banking 98

Banking Risk Management Management Corporate Governance 98

MHA Consulting

OCTOBER 26, 2023

The written plan is secondary though it has many benefits and may be needed to pass an audit by an agency or customer. Essential Elements of an IT/DR Plan Now that we’ve established the difference between the recovery plan and the plan documentation, we can look at the elements that should be present in both.

Disaster Recovery 106

Disaster Recovery Outage BCM Application 106

LogisManager

MARCH 19, 2024

In 2024 alone, over 5,360 breaches have compromised more than 30 billion records, signaling a clear and present danger to organizational security. Use risk assessments, security audits, and historical data analysis to uncover risks. Risk Assessment: Assess the likelihood and impact of each risk.

Cybersecurity 59

Cybersecurity Risk Management Vulnerability Mitigation 59

Security Industry Association

DECEMBER 20, 2022

Concerns had been expressed to negotiators by many in the federal contracting community that the latter could present substantial implementation challenges due to that fact that such semiconductors are reportedly found in a wide array of commercial products, and determining their presence could be extremely difficult.

Telecommunications 52

Telecommunications Government Audit Authorization 52

Plan B Consulting

FEBRUARY 2, 2018

This week I travelled to London to attend a meeting with a new client who we are conducting a gap analysis for, based on their present level of business continuity. If an auditor comes in and audits the business continuity produced under the banner, it must be able to pass a business continuity audit.

Business Continuity 52

Business Continuity Audit Gap Analysis Travel 52

Plan B Consulting

FEBRUARY 2, 2018

This week I travelled to London to attend a meeting with a new client who we are conducting a gap analysis for, based on their present level of business continuity. If an auditor comes in and audits the business continuity produced under the banner, it must be able to pass a business continuity audit.

Business Continuity 52

Business Continuity Audit Gap Analysis Travel 52

LogisManager

MARCH 19, 2024

In 2024 alone, over 5,360 breaches have compromised more than 30 billion records, signaling a clear and present danger to organizational security. Use risk assessments, security audits, and historical data analysis to uncover risks. Risk Assessment: Assess the likelihood and impact of each risk.

Cybersecurity 52

Cybersecurity Risk Management Vulnerability Mitigation 52

PagerDuty

FEBRUARY 22, 2022

PagerDuty demonstrated AWS expertise within the financial services industry and met a number of requirements, including successfully completing an audit of our financial services solution. To learn more, check out our recent webinar and presentation at re: Invent to learn more. Becoming a trusted partner is no small feat.

Financial Services 65

Financial Services Architecture Audit Outage 65

Reciprocity

APRIL 4, 2022

Audit risk. This means that risks presenting a higher threat must receive more comprehensive control measures than lower-risk hazards. Instead of using spreadsheets for your risk management strategies, adopt Reciprocity ZenRisk to streamline evidence and audit management for all of your compliance frameworks. Credit risk.

All-Hazards 95

All-Hazards Mitigation Risk Management Hazard 95

FS-ISAC

NOVEMBER 8, 2021

The board may ask if we can reduce exposure to risks operating outside of appetite faster if we invest more resources, but generally what we present to the board is the management-approved way forward, with budgets tied into that. Focus on no more than 2-3 key topics at any one time.

Cybersecurity 75

Cybersecurity Financial Services Risk Management Benchmark 75

Castellan

OCTOBER 8, 2021

Here are four ideas you can use this month or at any time to help build awareness: Build Executive and Key Stakeholder Engagement: Consider conducting a tabletop exercise where you present your executives and key stakeholders with a real-world example of a successful phishing attempt. Don’t wait until there is an incident to do these reviews.

Cybersecurity 98

Cybersecurity Cyber Resilience Resilience Business Continuity 98

Reciprocity

AUGUST 24, 2022

2007-2012): Audit management, enterprise, and operational risk management, compliance beyond financial controls, and more. 2013-2018): Using GRC solutions for enterprise-wide management in various areas such as risk management, compliance, legal, finance, audit, security, and health and safety. GRC 4.0: (2018-present): Automated GRC.

Risk Management 52

Risk Management Audit Insurance Insurance 52

Reciprocity

AUGUST 18, 2022

Your ERM program should encompass all aspects of risk management and response in all business processes, including cybersecurity, finance, human resources, risk management audit , privacy, compliance, and natural disasters. For example, your supply chain may present weaknesses that could cause damage to your operations or reputation.

Risk Management 52

Risk Management Management Mitigation Strategic 52

LogisManager

MAY 22, 2023

Execute a risk assessment and provide your Audit group with the RMM Auditor's guide to verify the program's effectiveness. You likely require SOC2 audits from them and may have been ratcheting up their certification levels. Visualize the gap between your current program's maturity and the BOD's risk tolerance.

Risk Management 52

Risk Management Evaluation Banking Benchmark 52

LogisManager

MAY 22, 2023

Execute a risk assessment and provide your Audit group with the RMM Auditor's guide to verify the program's effectiveness. You likely require SOC2 audits from them and may have been ratcheting up their certification levels. Visualize the gap between your current program's maturity and the BOD's risk tolerance.

Risk Management 52

Risk Management Evaluation Banking Benchmark 52

Pure Storage

JULY 13, 2022

If you’ve had a more piecemeal, de facto adoption of multicloud so far, take time to pause and do an audit. Monitoring provides real-time insight into the impact of performance degradation on customers, but increased multicloud adoption presents monitoring challenges.” – 2019 Gartner Market Guide for IT Infrastructure Monitoring Tools.

Capacity 98

Capacity Audit Government Alert 98

Reciprocity

JANUARY 3, 2023

With cyberattacks an ever-present risk, your organization should aim to monitor continuously in real-time for cyber threats. Schedule a demo today to reduce audit fatigue by reducing evidence collection to prevent mistakes and enhance productivity. Improve Your Security Posture with Reciprocity ROAR.

Security 52

Security Cybersecurity Vulnerability Risk Management 52

everbridge

NOVEMBER 2, 2021

As you audit your emergency plans, you are likely to have identified areas for improvement. If you would like to learn more information about Critical Event Management (CEM), Everbridge will be present at the World Climate Summit to discuss pragmatic solutions for resilient, inclusive responses to climate-related critical events.

Resilience 142

Resilience Risk Reduction Management Command Center 142

Prism International

JULY 26, 2019

Health care providers, often in panic mode, purchased software from the emerging software packages presented. For audit purposes, a copy of the certificate should be maintained in a Personnel file. As many end-users in the health care arena discovered, such was not the case. HIPAA training and certification is an individual endeavor.

Advertising 52

Advertising Marketing Audit Insurance 52

Advancing Analytics

APRIL 26, 2023

Image from Financial IT Being able to detect fraud is one of the major issues faced by companies in this present age. According to a report by the UK’s National Audit Office (NAO), fraud against the public sector alone is estimated to cost the UK government between £31 billion and £49 billion per year (National Audit Office, 2020).

Sports 52

Sports Activation Audit Insurance 52

Plan B Consulting

AUGUST 10, 2015

I have been talking about doing a Business Impact Analysis (BIA), on the building manufacturing plants in the Philippines, where I am presently working. Surely, ‘as a consultant you have a standard presentation and template which only needs to be slightly adjusted to each client’.

Manufacturing 52

Manufacturing Impact Analysis Consulting Audit 52

Plan B Consulting

AUGUST 10, 2015

I have been talking about doing a Business Impact Analysis (BIA), on the building manufacturing plants in the Philippines, where I am presently working. Surely, ‘as a consultant you have a standard presentation and template which only needs to be slightly adjusted to each client’.

Manufacturing 52

Manufacturing Impact Analysis Consulting Audit 52

Fusion Risk Management

AUGUST 18, 2022

Resilience enables agility when confronted by the chaos of our present world , and it protects against the disruption of critical customer – facing operations. Operational resilience is not just another buzzword. It i s top of mind for business leaders and regulators around the world.

Resilience 52

Resilience Authorization Gap Analysis Risk Management 52

everbridge

MAY 2, 2022

Social media is ever-present. It is no longer good enough to have a solution purely for the purpose of passing an audit, because they provide some level of notification or communication. Jeremy Capell: We’re shifting into a digital decade. So, the role of the CISO needs to keep pace with these trends.

Security 69

Security Internet eCommerce Resilience 69

Reciprocity

AUGUST 24, 2022

Inconsistent business processes result in poor quality and present high risks to service level agreements (SLAs). If your vendor needs to meet a compliance standard or regulation, check recent security audits to review how well it manages compliance with that standard. Operational. Staff training.

Management 52

Management Risk Management Cybersecurity Strategic 52