The Business of Interconnectivity

Building a Maturity Model for COBIT 2019 Based on CMMI

Years ago, the COBIT 5 Process Assessment Model (PAM) was commonly used to assess the maturity level of a COBIT implementation.

Communicating Information Security Risk Simply and Effectively, Part 1

In organizations, the topic of enterprise risk management presents a twofold problem: the calculation of the level of risk and effective communication to top management. An accurate risk assessment loses all its effectiveness if it is not properly understood by managerial executives with decision-making power.

Communicating Information Security Risk Simply and Effectively, Part 2

The ability to answer top management's questions is the first step to being successful in presenting information security risk effectively. In enterprise risk management, the difficulty is to combine different data...

Adopting International Standards in Africa to Protect Critical Infrastructure

The digitally interconnected world has immense potential. Internet-based technologies are becoming an integral part of every critical infrastructure.

Trusted AI Platforms for the Connected Car Ecosystem

It is common knowledge that sensitive or personal data from connected cars are at risk of being hacked or breached. More important though, is that it is critical to realize that connected cars pose serious threats to human lives, including fatalities.

Evidence-Based Prioritization of Cybersecurity Threats

The landscape of cybersecurity threats is evolving at a tremendous pace. New adversaries with increasingly sophisticated tactics and tradecraft seem to emerge on a continuous basis

Reduced Appetite: How COVID-19 Will Impact Future Business Continuity Planning

No one could have predicted the far-reaching effects of the COVID-19 outbreak. However, many organizations had invested in business continuity and disaster recovery (BC/DR) to prepare for such unexpected disruptions.

The Impact of Schrems II on the Modern Multinational Information Security Practice, Part 2

As discussed in “What the Schrems II Ruling Means for Modern Multinational Information Security Practice, Part I,” on 16 July 2020, the Court of Justice of the European Union (CJEU) rendered what is likely to be its most disruptive decision to international commerce to date, Data Protection Commissioner v. Facebook Ireland Ltd and Maximillian Schrems (“Schrems II”).

The Impact of Schrems II on the Modern Multinational Information Security Practice, Part 1

The transfer of personal data out of the European Union (EU) to nations around the world takes place tens of thousands of times every day, and it has been occurring for so long that it has largely become routine business.

Algorithms and the Auditor

Recent advances in machine learning (ML) and artificial intelligence (AI) have raised new awareness and concerns of algorithms, including their uses and misuses and their potential and limitations.

Benefits Management for Digital Transformation Programs

The global economy is becoming more challenging due to greater international competition, the pace of digital transformation and increased customer experience expectations.

A Text-Mining Approach to Cyberrisk Management

Cyberrisk is one of the most pervasive threats facing the global community. The World Economic Forum (WEF) has listed cybersecurity failure as one of the top-five global risk factors since 2018.

Does Trust Still Matter in the Era of Zero Trust?

The most common theme of recurring security incidents in recent memory has been associated with the breaches of seemingly trustworthy service providers or technologies.

How to Construct a Governance System From the Board Level to the Code Level

The concepts involved in promoting a mature structure for software platforms and applications can be quite intricate.

Adopting Technical Controls for Data Privacy in the Digital Age

These days, people tend to share seemingly related or unrelated personal information online, such as birthdays, addresses, contact details, relationships and holiday plans.

Cyberthreat Intelligence as a Proactive Extension to Incident Response

Cyberthreat intelligence (CTI) is one of the latest buzzwords in the information security industry.