Situation Overview: Technology risks constantly evolve. Effective IT Risk Management Programs can identify, address and, as needed, adapt to emerging risks. This analysis illustrates how an effective ...

Talk to a chief information security officer, especially those charged with securing IT in financially strapped organizations such as state and local governments, and you'll hear them explain they're ...

A risk assessment framework (RAF) is a strategy for prioritizing and sharing information about the security risks to an information technology (IT) infrastructure. A good RAF organizes and presents ...

Cybersecurity risk management identifies data and network risks and how to defend against them. Learn best practices for ...

"IT Risk Management disciplines have primarily focused on specific issues concerning security, disaster recovery and project-related risks. Many of the existing IT Risk Management tools are based on ...

What is a risk management framework? Implementing the principles and guidelines of a risk management framework (RMF) is not just an effective way to manage current risks, it also provides a structured ...

Enterprise risk management helps organizations identify, analyze and manage circumstances that can create business risk. In companies, risk comes in many different forms and could lead to disruptions ...

NIST's CSF, used with other guidance, can help map risk to actual threats and better comply with security mandates such as the U.S.'s cybersecurity executive order. The U.S. federal government has ...

The convergence of emerging technologies, including integration of generative AI, presents finance and controllership leaders an opportunity to take the reins of transformation through ownership and ...

On its way to becoming the fifth largest energy company in the world, Chevron has had its share of acquisitions, inheriting dozens of technology platforms and applications in the process. When the ...

Business risk management (BRM) is the structured process by which an organization identifies, assesses, manages and monitors internal and external threats that could impede its ability to achieve ...