Control Maturity vs. Control Risk: A Client Discussion
July 18, 2017
·
By
Peter Gregory
·
0 Comments
A client for whom I serve as CISO advisor posed an interesting question to me last week, “What if we measure and report on control maturity instead of risk?” A productive and interesting discussion on the topic ensued over the next forty-five minutes. I had never before received this question, so I had to literally think on my feet.
Continue reading
0 Shares
Three Steps to Enhancing Your Third-Party Risk Program
April 6, 2017
·
By
Peter Gregory ,
James Robinson
·
0 Comments
In the world of third-party and vendor risk management, many new practices are being adopted. Over the past few weeks, members of Optiv’s third-party risk team have initiated conversations with key industry leaders through a series of roundtable discussions. These thought leaders own or participate in their organizations’ third-party strategies. During these sessions, we shared leading practices and principles, and identified a number of common trends.
Continue reading
0 Shares
OCC Updated Guidance on Third-Party Risk
March 16, 2017
·
By
Peter Gregory
·
0 Comments
Recently, the Office of the Comptroller of the Currency (OCC), released updated guidance for bank examiners as they scrutinize third-party risk programs in banks and other financial institutions.
Continue reading
0 Shares
What Makes Organizations Resilient and Why You Should Care
August 17, 2015
·
By
Peter Gregory
·
0 Comments
Information systems are inherently fragile. Operating systems and applications are very complex machinery, and considering how many changes (such as security patches and feature upgrades) are made, it should not be surprising to see how unstable they can be at times.
Continue reading
0 Shares
Why Wait for a Security Breach?
August 13, 2014
·
By
Peter Gregory
·
0 Comments
Headline-making security breaches have hardly faded away since the beginning of the year. Looking back on statements Neiman Marcus made to journalist Brian Krebs following their January 2014 breach might provide an answer as to why.
Continue reading
0 Shares
Recovery Capacity Objective: A New Metric for Business Continuity and Disaster Recovery Planning
June 17, 2014
·
By
Peter Gregory
·
0 Comments
Business continuity and disaster recovery planning professionals rely on well-known metrics that are used to drive planning of emergency operations procedures and continuity of operations procedures. These metrics are...
Continue reading
0 Shares
(6 Results)
