Exposing IoT Blind Spots

by Sabine Zimmer | August 7, 2019 |

Organizations Don't Know What They Don't Know About Internet of Things Risk In a chilling interrogation video, a suspect describes hacking into Silicon Valley startup Aupticon via a third party weak point and an inviting Internet of Things (IoT) security hole. “They scanned most of the network, ....

Now Available: 2019 Vendor Risk Management Report

by Sabine Zimmer | May 8, 2019 |

“My dear, here we must run as fast as we can, just to stay in place. And if you wish to go anywhere you must run twice as fast as that.” -Lewis Carol, Alice in Wonderland   As they assess today’s complex  risk and regulatory environments, third party risk management (TPRM) prac ....

New FFIEC Examination Handbook is Required Reading

January 28, 2016 |

Hot on the heels of the June 2015 Cybersecurity Assessment Tool, the Federal Financial Institutions Examination Council (FFIEC) has issued a revised Examination Handbook Management Booklet with updated Information Technology (IT) examination procedures. ((FFIEC Information Technology Examination Han ....

Climate Change Comes to the World of Financial Services Risk Assurance

February 11, 2014 |

While the debate about global warming and atmospheric climate change continues to rage, there is little doubt that the “climate” around banking risk and risk assurance is changing rapidly, driven primarily by national and state regulators, federal and state attorney generals, and a public that i ....

BYOD: The Why And The How

by Sabine Zimmer | June 24, 2013 |

Today's organizations struggle with providing employees with access to the latest technologies. It's common practice for employees to use their own devices at work for a number of reasons. Some believe BYOD is the answer to a lot of problems, others see it as a complex security issue that introduces ....

« Previous Page