InformationWeek Risk-oriented Security

In the recent InformationWeek Analytics survey on IT risk management, only 52% of respondents say they have IT risk management programs in place. Of those, the majority focus their efforts on fulfilling regulatory compliance and reducing security incidents. Worse, only 11% characterize their programs as effective; 56% rate their programs as fair (needing improvement) or worse. Only 35% say their programs are at a maturity level where they are managed or optimized.

Governance, Risk, and Compliance: A Common-Sense Checklist for Getting Started

Implementing an effective GRC program, however, can be a daunting and challenging task. This paper offers a seven-point checklist to provide a framework for approaching your GRC program, help you think through the elements based on your organization’s cultural and operational requirements, and ensure you have all of your GRC program management bases covered.

Information Assurance 2.0

Today’s dynamic technology environment and evolving threats require federal agencies to adopt robust information assurance programs. This white paper outlines a unique approach for evolving information assurance into a more proactive and risk-aware function, resulting in the ability to anticipate risks while supporting mission-critical objectives.

Managing Risk in the Healthcare Industry: The Benefits of Implementing an Information Risk Management Program

New security and privacy implications driven by the stimulus bill are pushing healthcare organizations to enhance risk management processes and make evolving compliance activities into a more proactive and risk-aware function. In this white paper, learn about recommended privacy and risk management approaches that help healthcare entities meet the requirements of various mandates, and increase cost savings and efficiencies in the process.

Mitigating the Risks of Insurance: Using Enterprise Risk Management to Improve the Bottom Line

These days, companies must think strategically about the use of insurance and the areas of risk they seek to mitigate. Implementing an effective Enterprise Risk Management framework and practices can provide an opportunity to create value, improve business efficiencies, increase the effectiveness of reporting on business performance, and demonstrate stronger governance practices. In this white paper, learn how to more effectively understand, mitigate, and monitor risks, resulting in the reduction of premiums – as well as other business benefits.