Blog

With technological advancements such as automation and data analytics and the expanding need to counter fraudulent activities across verticals, career opportunities in Third Party Risk Management mirror the industry's rapid growth.  Certifications in the third party...

Everything in security boils down to data. Often, you are protecting private, sensitive or valuable data. You use data about data (Metadata). You monitor data about how people use your data (Security Events). You gather data on data in order to focus your attention...

In 1964, the average tenure of companies on the S&P 500 was 33 years. In 2016, that average tenure decreased to 24 years. By 2027, according to the consulting firm Innosight, companies will remain on the S&P 500 for an average of only 12 years. This “corporate...

The recent surge in ransomware attacks on U.S. cities and companies has data security and privacy professionals as well as third party information security leaders scrambling for better defenses and responses. This need is focusing more attention on cybersecurity...

As a PBS FRONTLINE documentary on artificial intelligence (AI) recounts, the technology started capturing widespread attention when AI systems began trouncing human competitors in complex games like Go. This year, says Santa Fe Group Senior Advisor Charlie Miller, AI...

On Thursday morning, February 20, 2020, people in tune with cybersecurity news woke to read that the private information of almost 11 million guests that stayed at the MGM Grand hotel and casino was posted publicly on a hacking forum.  Justin Bieber, Twitter CEO Jack...

When someone who has operated across multiple risk and regulatory realms for three decades notes that companies and their vendors have been thrust into a new era of data privacy, it’s worth bearing in mind.   The Santa Fe Group Senior Vice President and CSO Brad...

While at first glance the topic of due diligence may appear to be a stodgy one, the reality of a rapidly changing risk landscape and the evolution of due diligence techniques suggests that the opposite is true. The latest section of the Shared Assessments Third Party...

Cybersecurity’s emergence as a strategic risk has instilled the relationship between chief information security officers (CISOs) and board members with greater importance -- and higher stakes. Fostering a stronger cybersecurity capability requires directors to take...

Cybersecurity has swiftly become a strategic risk and a top boardroom concern. This shift has elevated the importance of the relationship between a company’s chief information security officer (CISO), or similar information technology (IT) executive, and its board --...

California consumers embarked on a new data privacy journey this year by wading through thousands of emails detailing corporate privacy policy updates related to the California Consumer Privacy Act (CCPA) that took effect Jan. 1. The 500,000 or so companies with...

Shared Assessments strives to be the trusted source for thought leadership, best practices and solutions for third party risk with opportunities for members to address global risk management challenges through committees, awareness groups, interest groups and special...