Putting cyber risk into business perspective
I am in the process of writing a new book intended as guidance for senior management and board members on decision-making when it comes to cyber risk.
internal control
Common sense on cybersecurity
Today’s post contrasts two recent pieces. PwC shared some very traditional thinking in Overseeing cyber risk: the board’s role.
How effective are your systems of governance, risk, and control/compliance (GRC)?
The majority of internal audit functions perform a variety of audits every year and provide an opinion (ideally) or at least a list of risk-ranked weaknesses (far less than ideally) on the scope of each audit.
