Management, compliance & auditing

How to Become an Information Systems Security Auditor

Cybercrime numbers never fail to impress. According to Ponemon’s 2017 Cost of Cyber Crime Study, the number of security breaches increased over 27% in 2017.

A Step-by-Step Guide to Data Security Compliance by Industry

Knowing what expertise is available and which standards are relevant to your sector are the first steps to ensure organizations are regulation compliant.

Security Risk Management Considerations for Small & Medium-Sized Business

Risk is inherent in any type of business endeavor whether you have a small or massive multinational business. When it comes to small- and medium-sized busine

A cyber insurance policy checklist

Use this checklist to help you purchase the best cyber insurance policy for your company. Step 1. Determine if you need cyber insurance. Things to consider

How to Select & Implement Effective Risk Management Standards & Frameworks

According to ISO 31000, the family of standards relating to risk management codified by the International Organization for Standardization, risks can be defi

10 Questions You Should Ask Vendors About Their Risk Management Program

Our supply chains are becoming ever more complex, not only in terms of the intricate web of suppliers and sub-suppliers, but also in the technologies used wi

How to Assess & Manage Third-Party Vendor Security Risks

One of the most famous and largest cyberattacks of all time was the Target breach of 2013. The attack exposed the data records of more than 70 million people

Understanding the Link Between Business, Operational & Security Risks

When it comes to risk planning and mitigation, it is important for you as an information security professional to understand the difference between a securit

A Look at Data Security Compliance & Regulations by Industry

Understanding and complying with regulations provides companies with business opportunities and reduces risk. To many, information security looks to be go

10 Ways GDPR Will Affect Data Collection and Use

The General Data Protection Regulation (GDPR) is almost upon us. May 25th, 2018 is the auspicious day that begins the enactment of the regulation. In a surve