Risk Acceptance 101: What Happens When Security Needs Go Unfunded?
The refusal of top leadership to fund security initiatives often translates to explicit, willful risk acceptance.
Asking the Right Questions: Key Takeaways From the CAQ’s ‘Cybersecurity Risk Management Oversight’ Guidance
The Center for Audit Quality (CAQ)'s "Cybersecurity Risk Management Oversight" guidance outlines key questions that board directors should ask about how the organization addresses risk.
As Cyber Risk Escalates, the C-Suite Must Take Action
As long as C-suite executives believe that cybersecurity is an IT issue, they will remain disengaged from the solutions and their role in supporting a robust cyber risk management strategy.
Lessons From the Marsh ‘Global Cyber Risk Perception Survey’: Disconnects Persist Despite Increased Executive Involvement
Despite in increased involvement of various stakeholders in risk management, a recent risk perception survey revealed a persistent disconnect between executives and the security function.
10 Takeaways From the ISO 31000:2018 Risk Management Guidelines
The International Standards Organization (ISO) released an updated version of its risk management guidelines to help security leaders engage top leadership in cyber risk decision-making.
Government Leaders Rank Cybersecurity Threats as Top Trend Affecting Communications, Survey Reveals
A recent survey of local government leaders revealed that cybersecurity threats represent the top trend affecting government communications, followed by citizen engagement and social media.
Failure to Communicate Critical Data Risk to Business Leaders Can Have Perilous Consequences
To avoid the disastrous consequences of a breach, security professionals must be able to effectively communicate critical data risk in a language business leaders can understand.
When It Comes to Cyber Risks, 2018 Is No Time to Play Games
Security teams had best bring their A-game to compete against ever-more sophisticated threat actors as new cyber risks emerge and evolve in 2018.
[Free E-Guide] Mitigate Your Business Risk Strategically With Cognitive Application Security Testing
Instead of waiting around for an incident to occur, organizations of all sizes need an application security testing program based on a fundamental understanding of risk management.
SEC Releases Updated Guidance For Cybersecurity Disclosure
The SEC released updated guidance regarding cybersecurity disclosure for public companies, emphasizing the responsibility of executives to report material risks and incidents.