It Grc News Today

While eliminating audit reports may be a step too far, thinking about their value and better ways to deliver that value can stimulate changes.

“Risk” is a four-letter word, so why not see if we can find ways to express ourselves without using it.

If risk management is to be meaningful, it needs to deliver actionable information to help people make informed and intelligent decisions.

While industry data clearly demonstrates the preference for, and value of, SaaS applications, I believe we’ve only scratched the surface of what’s possible.

Leaders of an organization should be managing the business, not a list of potential harms.

Which would you rather be when new information challenges arise: proactive or reactive?

Management will take actions they believe are high priority and in their own interests. They won't if the only reason to act is “the auditor told us to do it."

The rapid development and deployment of workplace technologies, coupled with the adoption of new ways of working, comes with added risks.

We are not limited to a rigorously enforced standard for communicating in person. Why should we be limited when we are writing?

PHOTO: 青 晨 The pandemic caused individuals and companies alike to alter or check their normal security and data protection practices. In 2019, I couldnt imagine providing my name and mobile phone number to restaurant hosts — that would then be written on a long and exposed paper list of other diners, too — to get a table inside. Nor could I have imagined logging, recording and sharing the health data of myself and others, to facilitate contact tracing. On the corporate s...