Risk Management Blog and Articles

December 1, 2021
tprm checkup third party risk management

TPRM Checklist: How Secure is Your Third Party Network?

It's time to make sure your program covers all the bases. This TPRM Checkup offers 10 tips to detect gaps or areas for improvement.
December 20, 2021
tprm challenges 2022 vendor risk management

3 TPRM Challenges That Organizations Will Face in 2022

With supply chains becoming more complex and vendors scattered around the globe, these are the top 3 TPRM challenges for security leaders.
March 29, 2022
tprm and nist compliance

TPRM and NIST Framework – Everything you need to know

Third party risk management and NIST: Learn how to evaluate vendor compliance with security, regulatory, and privacy requirements.
August 25, 2021
tprm and grc integration

TPRM and GRC: GRC Assessment Tools and Monitoring with TPRM

Companies tend to think integrating TPRM and GRC processes under one system is the most efficient choice, but there’s more to it.
April 30, 2020
tprm and governance

How to think of your TPRM program from a governance perspective

Sometimes, risk accountability is shared among multiple areas or business owners. So how to build a central program to be deployed across the organization?
February 16, 2022
tprm and business analytics

TPRM and Business Analytics – Oversight meets insight

Modern businesses rely on data to make smart decisions. Learn how to leverage third party risk findings in business analytics tools.
August 31, 2022
top 5 cybersecurity stories

Top 5 Cybersecurity Stories of the Summer

Attackers gained access to the development environment through a compromised developer account. What does this mean for LastPass users?
May 23, 2018
gdpr-third-party-risk

Guest Blog: A GDPR Primer to Meet the Deadline Next Week

Discussions on privacy laws have taken front and center in recent weeks as GDPR (General Data Protection Regulation) begins to be enforced by European Union (EU) member states on May 25, 2018.  As we have been discussing for a while, there is confusion as data collectors try to figure out the impact of this legislation.  There is no question that large, multi-national corporations will have to comply and many of these corporations are already in compliance.  However, with this deadline just around the corner, smaller companies that do not actively target EU residents are struggling with how this legislation impacts them. Until […]
October 27, 2022
Cybersecurity Awareness Month

7 Tips to Prevent Phishing and Business Email Compromise

Get the top tips to spot malicious emails and prevent phishing, ransomware, and other malware attacks in the business network.