Using the SCA in Complement with Other Assessments: Streamlining Due Diligence
This Building Best Practices resource: Examines how to improve due diligence assessment productivity. Identifies a strong strategy that leverages control verification reports. Documents a means of examining existing artifacts to more efficiently scope any remaining...
Addressing Concentration and Resilience Risk Across your Extended Supply Chain
Disaster has a way of bringing ‘supply chain’ into the common lexicon. In the aftermath of the 2011 Tohoku earthquake, major companies including Apple and Toyota experienced shortages of components manufactured in Japan. At the beginning of the COVID-19...
Back To School – For Her PhD in Cybersecurity
We can tell you a lot more about going back to school for your PhD in Cybersecurity than we can about what back-to-school will look like for our own children this year. Higher education institutions around the world now offer cybersecurity degrees and research...
Executive Summary: The Role of ERM in Managing Risks Related to New Technologies
This Executive Summary provides an overview of the challenges related to emerging technologies and key steps identified to help establish effective risk monitoring programs that are responsive to potential risks related to new technologies. This is the companion to...Papers
- Using the SCA in Complement with Other Assessments: Streamlining Due Diligence
- Executive Summary: The Role of ERM in Managing Risks Related to New Technologies
- The Role of ERM in Managing Risks Related to New Technologies
- GDPR Privacy Guidelines and Checklists
- CCPA Privacy Guidelines and Checklists
Studies
- A New Roadmap for Third Party IoT Risk Management
- The 2020 Third-Party Risk Management Study: The 3rd Rail of Security & Compliance
- Third Party IoT Risk: Companies Don’t Know What They Don’t Know
- 2019 Vendor Risk Management Benchmark Study: Running Hard to Stay in Place
- Internet of Things (IoT): A New Era of Third Party Risk
