June 9, 2017 | Cyber Risk, Data & Cybersecurity, Health Insurance Portability and Accountability Act (HIPAA), Public Policy
In this series, Shared Assessments Steering Committee member Ken Peterson talks about managing cyber risk in the healthcare space. Q&A Series – Part 2 For the healthcare industry, let’s talk about third party risk management, who are the third parties here and what types of risk are ....
October 19, 2016 | Cyber Risk, Data, Data Protection, Office of the Comptroller of the Currency (OCC), Third Party Risk, Third Party Risk Management
The three federal banking regulatory agencies, the Federal Reserve Board, the Federal Deposit Insurance Corporation, and the Office of the Comptroller of the Currency, announced an advance notice of proposed rulemaking (ANPR) regarding enhanced cyber risk management standards for large and interconn ....
October 14, 2016 | Banking and Financial Services, Cybersecurity, Guidance, Industry Verticals
This week the U.S. Department of the Treasury and the Board of Governors of the Federal Reserve System announced the publication of the G-7 Fundamental Elements of Cybersecurity for the Financial Sector. The document, released by central bank governors and finance ministers of the G-7 nations, delin ....
August 31, 2016 | Brexit, Data, Data Protection, General Data Protection Regulation (GDPR), Privacy, Public Policy
While the expanded regulations and new accountabilities of the European Union (EU) Regulation 2016/679, better known as the General Data Protection Regulation (GDPR) are daunting in scope, they do provide significant opportunities as well. ((Official Journal of the European Union. L 119. 4 May 2016. ....
August 30, 2016 | Regulations, Third Party Risk, Third Party Risk Management
As more organizations here in North America and overseas increasingly utilize third party vendors with a global presence to perform critical functions, process key transactions and provide exposure to sensitive proprietary information, those organizations with mature third party risk (TPR) programs ....
July 26, 2016 | Agreed Upon Procedures (AUP), Program Tools, Regulatory Compliance, Risk Management, Shared Assessments, Third Party Risk, Third Party Risk Management
The summer of 2016 has been one of media challenges, and breaking records for heat waves across many states. Slow moving boats, relaxing fishing in normal idyllic mid-summer breaks have been swept aside by a flurry of activity within the sea of third party risk. This past week in Boston, the Share ....