"IT Risk Management disciplines have primarily focused on specific issues concerning security, disaster recovery and project-related risks. Many of the existing IT Risk Management tools are based on ...

NIST's CSF, used with other guidance, can help map risk to actual threats and better comply with security mandates such as the U.S.'s cybersecurity executive order. The U.S. federal government has ...

When you follow the news in IT security, there's always something new and dangerous that might pull your strategy off course. Studying new vulnerabilities, security failures and data breaches will ...

Phil Goldstein is a former web editor of the CDW family of tech magazines and a veteran technology journalist. He lives in Washington, D.C., with his wife and their animals: a dog named Brenna, and ...

Risk management is the process of identifying, analyzing, and mitigating uncertainties and threats that can harm your company or organization. No business venture or organizational action can ...

Risk management should not just be a checklist to be compliant. Rather, it should be a source of value, inextricably tied to your business strategy. Purpose-driven and customer-centric risk management ...

Once the risk team has been assembled, the crucial process of identifying risks must commence. The output of the risk ...

A typical organization spends 30-50% more on compliance and IT risk policy management than it should, according to the IT Policy Compliance Group. Given today's highly regulated business environment ...

Modern companies, both small and large, require more software and tools to compete in an ever-changing marketplace. A particularly valuable tool is software that handles Governance, Risk, and ...