Human Element of Risk

Human Error: A Vastly Underestimated Risk in Digital Transformation Technology

Author: Guy Pearce

There should be no doubt that digital transformation is an organizational necessity performed in the interest of maintaining, sustaining and enhancing an enterprise’s relevance to its constituents.

Communicating Technology Risk to Nontechnical People: Helping Enterprises Understand Bad Outcomes

Author: Jack Freund

Too often, well-meaning technology professionals attempt to explain risk to their enterprises and fail to achieve their objective. These professionals fully understand the state of the computing environment and the importance of securing it.

Case Study: Building a Rock-Solid ERM Culture on FAIR

Authors: Dan Blum and Keith Weinbaum

Rock Holdings, Inc., is a US-based holding company which owns several subsidiary companies including Quicken Loans, the US’s largest mortgage lender.

How to Balance Insider Threats and Employee Privacy

Author: Isaac Kohen

Recent headlines are replete with extremely costly and disruptive examples of insider threats playing a prominent role in high-profile data breaches.

Addressing Key Pain Points to Develop a Mature Third-Party Risk Management

Authors: Visveshwar Ramasubramaniam and Anil Kumar Singh

Third-party risk management is high on the boardroom’s agenda. The business ecosystem is heavily dependent on third-party relationships, and with this dependence comes a responsibility to manage risk.

Managing Technology Risk to Protect Privacy and Confidentiality

Author: Thiago de Oliveira Teodoro

Enterprises must deal with a large and constantly growing volume of data, and they require the capacity to manipulate and process this information while protecting data sources.

Information Security Matters: CISOs in the Cloud

Author: Steven J. Ross

Here is an unoriginal observation: The Cloud changes everything. Oh, wait, that was the Internet. Whatever. It seems that if it is novel, it changes everything. So the Cloud makes most of us information security professionals unnecessary.

IS Audit Basics: In Defense of Privacy by Design

Author: Ian Cooke

In a couple of recent editions of the ISACA Journal (referred to as columns one and two herein), my fellow columnist, Steven J. Ross, made a case whereby he believes that, contrary to the EU General Data Protection Regulation...

The Bleeding Edge: The Patter of Emerging Technologies

Author: Dustin Brewer

The idea that we are all connected via some ethereal or other unknown plane is a belief held by metaphysical enthusiasts and religions all around the world. There is something to be said about the interconnectivity of the human spirit and experience.

Innovation Governance: Massive Automation to Reduce Human Risk

Author: K. Brian Kelley

Even in large organizations, it is not unusual to find controls that still involve a great deal of manual effort. In fact, evidence for an attestation may be entirely generated by someone taking screenshots.

The Practical Aspect: The Human Elements of Risk

Authors: Vasant Raval and Rajesh Sharma

In classical Greek mythology, Daedalus was helplessly watching Icarus, his son, fall to his death. Daedalus, having designed the Minotaur’s Labyrinth, was imprisoned.