So, your security team or risk management consultants have finalized your risk assessment report, calling out the organization's risks and opportuniti…
If you have read one of our previous posts around risk assessments, you probably have a good idea of why a risk assessment matters. You’re probably al…
The Information Risk Council (IRC), also known as the Risk Governance Council or Security Steering Committee, is a key component of an effective secur…
Whether you are pursuing an ISO 27001 certification or a SOC 2 report, a robust asset inventory is going to be key to addressing compliance requiremen…
Everything you need to know to pass with flying colors. Studying for the CISA exam can be tough, but it is also a great opportunity to understand the …
A guide to the Trust Services Criteria Knowing when to include the various SOC 2 Trust Services Criteria (TSC) (also, criteria) can seem like a daunti…