Advice for Taking the CISA Exam (Updated)
Everything you need to know to pass with flying colors. As risk3sixty continues to grow, more members of our team will be taking the Certified Information Systems Auditors (CISA) exam [...]
An Insider’s Perspective on Choosing a Security and Compliance Partner That Is Right for Your Business
A few things to consider when choosing a consulting firm partner. At risk3sixty, we interact with a lot of prospective customers who want us as a security consulting partner. Some [...]
Craftsmanship in Music and Compliance
If you’ve been on stage for a speech or performing arts, you know stage fright is real. Businesses can get nervous when they hear the word "audit" in the same [...]
Simplified Guidance on Developing a Cyber Security Baseline for the CIO and CTO
Developing a cyber security baseline can be daunting. Oftentimes the burden falls on the Chief Information Officer or Chief Technology Officer. Before implementing any tool or assessments, management should establish a security baseline.
How We Measure Candidates at risk3sixty
Business boils down to one thing: People People are the most challenging (and rewarding) part of a successful business. And I mean the full lifecycle of employee experience. You have [...]
Build a Security Program and Run It Like a Business
I recently finished the book "Traction" by Gino Wickman. Next to Scaling-Up by Verne Harnish, I think it is one of the most actionable business books I've ever read. Our [...]
How to Turn the Risk Committee Meeting into the Most Valuable Meeting on Your Calendar
Mention "Risk Committee" or "Enterprise Risk" to upper management and you will probably get an eye role. If you suggest a standing meeting about risk - it might get you [...]
Thoughts on Building an Information Security Program that Sticks
Most executives realize that information security (and cybersecurity) is a rising threat within their organization. This is the new normal in the digital economy. As result information security professionals that [...]
Quality Work Does Not Mean Quality Service
Quality Work Does Not Mean Quality Service "Managing the Professional Services Firm" by David Maister is considered to be "core canon" among consulting professionals. Though it was originally published over [...]
Advice for Studying and Passing the CISSP Exam
This past week I sat for the (ISC)2 CISSP exam and passed on my first attempt! With the entire preparation and test taking experience still fresh on my mind, I [...]