Audit Board

OCTOBER 2, 2023

Information security can assign risks to critical assets in a structured IT risk management (ITRM) process. ITRM makes it possible to understand the asset landscape comprehensively, so it becomes straightforward to identify areas of high risk. With the ISO framework, for instance, compliance initiates the risk assessment.

Compliance 59

Compliance Technology Finance 59

Audit Board

OCTOBER 3, 2023

ITRM: The Promise and Challenges of Risk Quantification explores why risk quantification — the process of defining the impact of a risk to the business in dollars — is an endeavor worth undertaking, and dismantles several common myths to getting started.

Technology 52

Technology Compliance 52

Audit Board

APRIL 13, 2023

Historically, businesses have thought of resilience as being focused in IT risk management (ITRM). That’s why ITRM is the technology category of focus for resilience. Why It Matters Now more than ever, businesses must be able to quickly identify, respond to, and recover from risk events (e.g., IT is now the backbone of business.

Compliance 52

Compliance Start-ups Technology Specific Risk 52

Audit Board

AUGUST 1, 2023

IT Risk Management Defined The goal of IT Risk Management, sometimes abbreviated to ITRM, is to identify, assess, address, and analyze IT-related risks that could affect the business, improving IT operations, cybersecurity, risk mitigation capabilities, and the organization’s overall risk and security posture.

Technology 52

Technology Start-ups Compliance Marketability 52

Audit Board

JULY 26, 2023

AuditBoard’s newest eBook, Scaling ITRM: The Promise and Challenges of Risk Quantification , answers this question and offers solutions that future-oriented InfoSec teams can take to successfully quantify risks and communicate critical impact to business executives.

Start-ups 52

Start-ups Technology 52

Audit Board

OCTOBER 12, 2023

In leading businesses, we have seen the idea of Enterprise Risk Management (ERM) evolve from a single, general risk department to fragmented risk teams like IT Risk Management (ITRM), Governance, Risk and Compliance (GRC), and Operational Risk Management (ORM).

Technology 52

Technology Compliance Finance 52

Audit Board

MAY 2, 2023

While AuditBoard was founded to focus on better leveraging technology to assist companies with SOX compliance and readiness, solutions now span GRC, ORM, ITRM, ERM, security compliance management, compliance audits, assessment management, and beyond to create a truly connected risk platform.

Compliance 52

Compliance Technology Specific Risk 52

Audit Board

NOVEMBER 1, 2023

Various sub-disciplines, like operational risk management (ORM), supply chain risk management (SCRM), and IT risk management (ITRM) branched from the core tenets of risk management and applied those principles to the relevant business operations and departments.

Compliance 52

Compliance Technology Dividends Start-ups 52

Audit Board

AUGUST 23, 2023

Audit, risk, compliance, and ITRM professionals will be forced to work together to come up with solutions, engendering a clearer understanding of cybersecurity’s impact on the business — and better alignment of technologies, processes, and business outcomes. Without this view, the impact on a reasonable investor cannot be determined.”

Compliance 52

Compliance Technology Start-ups 52

Audit Board

OCTOBER 2, 2023

Utilizing ITRM and CrossComply from AuditBoard can take away or ease many of the difficulties that come with setting up and maintaining a cybersecurity risk management program. With cybersecurity risks integrated into almost everything we do, it might seem impossible to develop an effective cybersecurity risk management program.

Technology 52

Technology Start-ups Data Analysis Compliance 52

Audit Board

OCTOBER 12, 2023

Many leading organizations have embraced cyber risk quantification to understand the financial impact of a cyber risk event. Still, mixed information and a need for more awareness around the concept have resulted in several myths.

52

52

Audit Board

AUGUST 9, 2023

While issues management often begins in silos like InfoSec, internal audit, and SOX, a mature issues identification and reporting structure follows a risk-based approach by connecting issues back to the organization’s risks. To accomplish this, it is necessary to establish common and shared elements of issues management across departments.

Compliance 52

Compliance Technology 52

Audit Board

AUGUST 3, 2023

This article originally appeared on the ISACA Blog. Information technology (IT) risk assessments focus attention on critical information assets, highlight connections between cyber threats and risks, and map key controls to known threats. Assessing IT risk also demonstrates compliance with regulations and adherence to frameworks.

Compliance 52

Compliance Technology 52

Audit Board

AUGUST 2, 2023

Organizations face multiple challenges regarding their IT Risk and Compliance (ITRC) programs. It’s difficult keeping up with changes to requirements and regulations. Assessments are often rushed and lack the proper thoroughness.

Compliance 52

Compliance Technology Banking Marketability 52

Audit Board

AUGUST 8, 2023

Other outgrowths of risk management include operational risk management (ORM), IT risk management (ITRM), project risk management (PRM), and supply chain risk management (SCRM), which can all be consolidated into an enterprise risk management program.

Compliance 52

Compliance Start-ups Technology Marketability 52

Audit Board

SEPTEMBER 29, 2023

What are the benefits when you automate monitoring and reporting for IT general controls?

Start-ups 52

Start-ups Technology 52

Audit Board

SEPTEMBER 19, 2023

What are your top priorities when developing a strategic IT risk program?

Compliance 52

Compliance Technology 52