A GRC Tool is Not a GRC Program
A GRC tool can provide many benefits to your GRC program, as we’ve discussed before. However, before you go chasing shiny objects, you must understand what a GRC program is [...]
4 Benefits of a GRC Tool
A GRC tool can help an organization manage its governance, risk, and compliance program. But why use a GRC tool instead of managing your GRC program manually? GRC tools can [...]
How to Perform a Risk Assessment (Part 2)
After you perform a risk assessment, what do you do with the results? Find out the answers to that and other common risk assessment questions in part 2 of this series! [...]
How to Perform a Risk Assessment (Part 1)
How do you perform a risk assessment, and what do you do with the results? Find out the answers to some common risk assessment questions in Part 1 of our two-part [...]
How to Recruit, Develop, and Keep Top Cybersecurity Talent (Part 5)
This blog post on developing and retaining security professionals at your high growth technology company is part of a multi-part series on designing an information security program in alignment with [...]
Beyond Vulnerability Scans: Mitigating and Monitoring for Malware Leveraging C2 Systems
Many modern forms of malware are now file-less and rely on Command & Control (C2) infrastructure to assist outsiders with gaining unauthorized access to networks. This malware “phones home” to [...]