Blog

By now we’ve all heard of SaaS (software as a service) and many have heard of IaaS (Infrastructure as a Service), PaaS (Platform as a Service), or the term that contains them all: XaaS (anything as a service). The as-a-Service business model, which usually has customers paying a subscription rate ....

As the war in Ukraine enters its second month, and China implements its most severe lockdown since the CoVID-19 pandemic began, it is imperative that businesses with international operations rethink their scenario planning. The pandemic, followed by the war, has exposed the downside of choosing e ....

As numerous reputable security and analysis organizations continue to weigh the criticality of the recent Spring4Shell (aka: “SpringShell”) vulnerability, Shared Assessments has opted to take a neutral stance as to its prevalence and criticality. Regardless of this, it is crucial to continuously ....

How to Scope a Custom SIG Questionnaire The video guides you through the creation of a custom SIG scoping template, which is then used to generate a custom SIG questionnaire.   Functionality of the SIG scoping template Scoping is the process of selecting risk-based questions that ....

In a recent Fireside Chat presented by Shared Assessments Committees’ Leadership on “Current and Evolving Cyber & Supply Chain Risks,” conversation topics included Conti, CISA, the geopolitics of SWIFT payments, chip shortages, and how the war in Ukraine might influence China’s actions t ....

For the past few weeks, a worldwide audience has watched in fear and shock as war unfolds in the streets of Ukraine, causing thousands of casualties and deaths and displacing thousands of people. This is the bloody side of war, the one some experts have hoped we’d see less of worldwide as more cou ....

For the past few weeks, a worldwide audience has watched in fear and shock as the war unfolds in the streets of Ukraine, causing thousands of casualties and deaths and making many more refugees. This is the bloody side of war, the one some experts have hoped we’d see less of worldwide as more coun ....

Shared Assessments is pleased to announce that the Standard Information Gathering Questionnaire (SIG) mapping is now incorporated into the Secure Controls Framework (SCF) catalog of controls. This was a collaborative endeavor between Shared Assessments and the SCF. Benefit of Using SCF Alongside ....

Where are the war-related cyber attacks? It’s an unnerving question that has information security and third party risk management (TPRM) professionals knocking on wood. There are several viable answers to the question, the most important of which may be that there are better, more practical quest ....

The work of third-party risk management (TPRM) is ongoing. The moment a business ceases to actively work on protecting itself from risk, it falls behind. In part, that’s because world events and the tactics employed by cybercriminals are continually changing in ways that impact third-party risk. B ....