Since the massive Target data security breach in December 2013, third party cyber security stopped being an afterthought and started becoming one of the top security priorities for CISOs and Risk Departments. As a response, third party risk management (TPRM) underwent a transformation in early 2014, and continues to reverberate today. With attackers finding new ways toContinueContinue reading “Top 3 Third-Party Risk Management Challenges”
Author Archives: Micky Wong
What is GRC
GRC stands for Governance, Risk and Compliance, although some organizations may use the acronym to stand for “Governance, Risk and Control.” It is a strategy for managing an organization’s overall governance, enterprise risk management and compliance with regulations. The capabilities of GRC are often spread over different departments: internal audit, compliance, risk, legal, finance, IT, HR as wellContinueContinue reading “What is GRC”
How Security Ratings Help
Although GRC is more than software, digital tools are often used to keep GRC operations organized and processes streamlined. Large organizations are complex and may often have to meet many compliance requirements, often taking into account quickly-changing regulations. Similarly, risk changes quickly as well, and IT leaders may need to make decisions about risk quicklyContinueContinue reading “How Security Ratings Help”
