A GRC tool can provide many benefits to your GRC program. However, before you chase shiny objects, you must understand what a GRC program is and how a…
So, you’ve been tasked with providing evidence for an audit. You may be wondering what your auditor is even looking for. Let’s take a look behind the …
Every company must deal with governance, risk, and compliance. Often abbreviated as GRC, this business function is responsible for ensuring that major…
A GRC tool can help an organization manage its governance, risk, and compliance program. But why use a GRC tool instead of managing your GRC program m…
After you perform a risk assessment, what do you do with the results? Find out the answers to that and other common risk assessment questions in part …
How do you perform a risk assessment, and what do you do with the results? Find answers to some common risk assessment questions in Part 1 of our two-…
In this blog, we’ll dive into one of the most important parts of a SOC 2 report, the SOC 2 System Description! During your due diligence process, a ve…
Preparing for your HITRUST Validated Assessment is no small task. With a little bit of preparation, you can ensure that the assessment goes smoothly. …
Navigating the ins and outs of two of the most popular compliance frameworks. When it comes to vendor due diligence, many companies are raising the ba…
Answering some of the most commonly asked questions around ISO 27001 implementation. At risk3sixty, we have helped many clients implement ISO 27001. T…
Tips for security administrators during the COVID-19 pandemic We have seen a massive increase in the number of employees working from home due to the …
Understanding the results of a HITRUST engagement and how to use them. During your vendor due diligence process, a vendor sends you their HITRUST repo…