A GRC Tool is Not a GRC Program
A GRC tool can provide many benefits to your GRC program, as we’ve discussed before. However, before you go chasing shiny objects, you must understand what a GRC program is [...]
4 Benefits of a GRC Tool
A GRC tool can help an organization manage its governance, risk, and compliance program. But why use a GRC tool instead of managing your GRC program manually? GRC tools can [...]
How to Perform a Risk Assessment (Part 2)
After you perform a risk assessment, what do you do with the results? Find out the answers to that and other common risk assessment questions in part 2 of this series! [...]
How to Perform a Risk Assessment (Part 1)
How do you perform a risk assessment, and what do you do with the results? Find out the answers to some common risk assessment questions in Part 1 of our two-part [...]
NISTIR 8259: Securing IoT Devices of Tomorrow – Part 2
This is the second blog post covering NISTIR 8259 and securing IoT devices. If you missed it, be sure to check out part 1 where we cover the “pre-market” phase [...]
Designing an Incident Response Program
Incident response is a critical aspect of any security program. A well-designed incident response program can greatly decrease the cost of a security incident or data breach. Additionally, it is [...]
NISTIR 8259: Securing IoT Devices of Tomorrow
How IoT device manufacturers can use guidance from NISTIR 8259 to secure the IoT devices of tomorrow. The growing footprint of the Internet of Things (IoT) has already affected our [...]
Webinar: The CISO Role: How to Design a Security Leadership Role Custom Fit to Your Organization
Check out our webinar from Shane Peden and Christian Hyatt in which they discuss common pitfalls of the CISO role as well as a framework to design a CISO role [...]
How to Gamify your Security Awareness Training
Take your security awareness training to the next level! Human error continues to be a leading factor in data breaches. Security awareness training can reduce the likelihood of this error, [...]
Implementing a Simple and Secure SDLC
Use a seamless and safe process to develop, deploy, and maintain any modern software application. The ability to create a software application has never been easier. Anyone can learn how [...]