Tag: grc

The Year of Global AI and Cybersecurity Regulations: 7 GRC Predictions for 2025

Dec 19, 2024 7:43 PM

by

Andy Stern

in SecurityNews

Tags: ai, ciso, compliance, cybersecurity, framework, grc, law, regulation

As 2025 approaches, emerging regulations and laws will affect how CISOs strategize and protect their organizations. With the increasing complexity of global compliance frameworks, understanding these changes is crucial for maintaining security and operational efficiency. Let’s discuss what I expect regarding regulatory shifts and their implications in 2025 and explore what CISOs and CCOs should……
The 7 most in-demand cybersecurity skills today

Dec 12, 2024 12:05 PM

by

Andy Stern

in SecurityNews

Tags: access, ai, api, application-security, attack, backup, best-practice, breach, business, cloud, compliance, computing, control, cyber, cyberattack, cybersecurity, data, defense, encryption, exploit, framework, gartner, GDPR, google, governance, grc, group, hacker, Hardware, healthcare, incident response, infrastructure, injection, intelligence, jobs, LLM, malicious, mitigation, ml, network, penetration-testing, phishing, privacy, ransomware, risk, risk-analysis, risk-assessment, risk-management, saas, service, skills, social-engineering, software, spear-phishing, strategy, technology, threat, tool, training, update, vulnerability, zero-trust

Cybersecurity teams find themselves understaffed, overburdened, and rushing to keep up with a rapidly changing threat landscape, as cyberattackers continually devise new ways to attack organizations, and organizations accelerate their embrace of the latest technologies.As a result, security professionals must continually upskill themselves to ensure they keep pace with organizations’ latest skill demands. Unfortunately, deciding…
GRC is a business enabler and now you can prove it

Dec 11, 2024 9:06 PM

by

Andy Stern

in SecurityNews

Tags: business, grc

First seen on scworld.com Jump to article: www.scworld.com/native/grc-is-a-business-enabler-and-now-you-can-prove-it
Interview mit HiScout Lässt sich GRC noch ohne ein ganzheitliches Tool umsetzen?

Dec 9, 2024 3:07 PM

by

Andy Stern

in SecurityNews

Tags: business, compliance, governance, grc, risk, tool

Das Management von Governance, Risk und Compliance, kurz GRC, wurde in der Vergangenheit oftmals separat betrachtet und noch viel eklatanter via Listen abgehakt. Netzpalaver sprach via Remote-Session mit Sascha Kreutziger, Leiter Business Development bei HiScout, wie sich die Unternehmens-Anforderungen an Business-Continuity und den Datenschutz, insbesondere über Abteilungen hinweg mit der effizient umsetzen […] First seen…
Gen AI use cases rising rapidly for cybersecurity, but concerns remain

Dec 9, 2024 8:07 AM

by

Andy Stern

in SecurityNews

Tags: ai, attack, automation, awareness, ceo, ciso, compliance, control, cybersecurity, data, detection, finance, framework, fraud, GDPR, governance, grc, group, guide, Hardware, HIPAA, incident response, intelligence, international, malware, middle-east, monitoring, phishing, privacy, RedTeam, regulation, risk, risk-assessment, risk-management, soc, software, strategy, technology, threat, tool, training, usa

Generative AI is being embedded into security tools at a furious pace as CISOs adopt the technology internally to automate manual processes and improve productivity. But research also suggests this surge in gen AI adoption comes with a fair amount of trepidation among cybersecurity professionals, which CISOs must keep in mind when weaving gen AI…
Channel Brief: Valiantys Launches GRC Solution

Dec 2, 2024 9:48 PM

by

Andy Stern

in SecurityNews

Tags: grc

First seen on scworld.com Jump to article: www.scworld.com/news/channel-brief-valiantys-launches-grc-solution
Top challenges holding back CISOs’ agendas

Nov 25, 2024 6:51 PM

by

Andy Stern

in SecurityNews

Tags: ai, attack, authentication, awareness, breach, business, ceo, cisa, ciso, compliance, control, cyberattack, cybersecurity, data, deep-fake, defense, detection, framework, grc, group, insurance, intelligence, jobs, malicious, monitoring, network, password, phishing, privacy, regulation, risk, skills, soc, social-engineering, strategy, threat, tool, training, vulnerability, zero-trust

In the past decade, every CISO knew the question awaiting them in the boardroom: Can we survive the next cyberattack? Now, as the turbulent 2024 draws to a close, the concerns have multiplied, says Don Gibson, the CISO at Kinly. Board members are often asking: Can we survive these economic times? Or are we prepared…
North Korean fake IT workers up the ante in targeting tech firms

Nov 25, 2024 6:51 PM

by

Andy Stern

in SecurityNews

Tags: access, advisory, ai, awareness, breach, ciso, compliance, crowdstrike, crypto, cybercrime, data, deep-fake, detection, edr, email, exploit, extortion, finance, governance, government, grc, group, incident response, infrastructure, jobs, korea, north-korea, risk, scam, social-engineering, technology, theft, tool, unauthorized, usa, vpn

North Korean fake IT worker scams are evolving to incorporate theft and extortion as more examples of targeting against technology and other companies emerge.The deception typically features North Korean operatives posing as legitimate IT professionals in attempts to gain employment at Western firms, almost always for positions that offer remote working options.Once hired, these “remote…
Trustero Secures $10 Million in Funding to Grow AI-Powered Security and Compliance Platform

Nov 22, 2024 5:53 AM

by

Andy Stern

in SecurityNews

Tags: ai, compliance, grc

The company emerged from stealth mode in March 2022 and has been on a mission to help companies reduce compliance cost and handle time-consuming GRC tasks. The post Trustero Secures $10 Million in Funding to Grow AI-Powered Security and Compliance Platform appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/trustero-secures-10-million-in-funding-to-grow-ai-powered-security-and-compliance-platform/
Unlock the Future of GRC: Top Innovations Transforming the Industry

Nov 7, 2024 3:04 PM

by

Andy Stern

in SecurityNews

Tags: compliance, governance, grc, risk

I recently watched a video that struck me as a perfect metaphor for today’s challenges and innovations in Governance, Risk, and Compliance (GRC). In the clip, a driver faced with crossing a canal doesn’t attempt to drive through the water, which would almost certainly fail. Instead, he balances the boom and bucket of his tractor……
Unclear pricing for GRC tools creates market confusion

Oct 29, 2024 4:56 AM

by

Andy Stern

in SecurityNews

Tags: compliance, government, grc, risk, risk-management, tool

Due to widely varying government, risk, and compliance (GRC) tool pricing, enterprise risk management (ERM) leaders must understand four different pri… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/25/grc-tool-pricing-transparency/
Is It Time to Move on from Your Legacy GRC Solution?

Oct 22, 2024 8:02 AM

by

Andy Stern

in SecurityNews

Tags: grc

Is your organization stuck with a legacy GRC solution that feels more like a blocker than an innovator? You’re not alone. Many companies today find th… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/is-it-time-to-move-on-from-your-legacy-grc-solution/
What you need to know to select the right GRC framework, North American Edition

Oct 14, 2024 5:54 AM

by

Andy Stern

in SecurityNews

Tags: compliance, framework, governance, grc, risk

Governance, risk, and compliance (GRC) frameworks help professionals assess an organization’s risk posture, align technological initiatives with busin… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/11/isc2-select-the-right-grc-framework/
Guide for selecting the right GRC framework, EU edition

Oct 11, 2024 5:54 AM

by

Andy Stern

in SecurityNews

Tags: compliance, cybersecurity, framework, governance, grc, guide, risk

Governance, risk, and compliance frameworks are critical. They enable cybersecurity professionals to accurately identify an organization’s risk postur… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/09/isc2-grc-guide-eu/
Channel Brief: Airtable Launches Enterprise AI Capabilities, AuditBoard Enhances GRC

Sep 29, 2024 10:36 PM

by

Andy Stern

in SecurityNews

Tags: ai, grc

First seen on scworld.com Jump to article: www.scworld.com/news/channel-brief-airtable-launches-enterprise-ai-capabilities-auditboard-enhances-grc
The GRC Group Strengthens Cybersecurity Offering with Acquisition of Pentest People, Expanding Its Global Reach and Expertise

Sep 18, 2024 2:29 PM

by

Andy Stern

in SecurityNews

Tags: business, compliance, cybersecurity, grc, group, penetration-testing, risk, service, software

The GRC Group (>>GRC>Group>>), a leading provider of software and tech-enabled services to manage business risks and regulatory compliance,… First seen on itsecurityguru.org Jump to article: www.itsecurityguru.org/2024/09/05/the-grc-group-strengthens-cybersecurity-offering-with-acquisition-of-pentest-people-expanding-its-global-reach-and-expertise
Harnessing the Power of GRC Software for Enhanced Business Resilience and Compliance

Sep 17, 2024 8:29 AM

by

Andy Stern

in SecurityNews

Tags: business, compliance, grc, resilience, software

Have you ever tried to fix a leaky faucet only to discover that the whole plumbing system is outdated? I sometimes feel that way about the world of GR… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/harnessing-the-power-of-grc-software-for-enhanced-business-resilience-and-compliance/
Channel Brief: Vanta Adds New GRC Tools, High Wire Networks Adds New Leadership

Sep 8, 2024 9:35 PM

by

Andy Stern

in SecurityNews

Tags: grc, network, tool

First seen on scmagazine.com Jump to article: www.scmagazine.com/news/channel-brief-vanta-adds-new-grc-tools-high-wire-networks-adds-new-leadership
4 Tips for Optimizing Your GRC Strategy

Sep 2, 2024 3:34 PM

by

Andy Stern

in SecurityNews

Tags: grc, strategy

First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/4-tips-for-optimizing-your-grc-strategy/
A Crash Course on Hyperproof’s GRC Maturity Model

Aug 23, 2024 2:06 PM

by

Andy Stern

in SecurityNews

Tags: compliance, governance, grc, risk

Something has been missing in the governance, risk, and compliance (GRC) space: the ability to truly understand an organization’s GRC maturity and the… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/a-crash-course-on-hyperproofs-grc-maturity-model/
When Compliance Fails: Eye-Opening Incidents in GRC You Need to Know

Aug 22, 2024 8:06 PM

by

Andy Stern

in SecurityNews

Tags: compliance, governance, grc, risk

In the world of governance, risk, and compliance (GRC), there’s no shortage of incidents that illustrate what can happen when companies fall short of … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/08/when-compliance-fails-eye-opening-incidents-in-grc-you-need-to-know/
Hiscout schließt Partnerschaft mit Intelli Systems ab

Aug 12, 2024 1:35 PM

by

Andy Stern

in SecurityNews

Tags: grc, software

Hiscout, führender Anbieter von GRC-Software, hat eine Kooperation mit Intelli Systems abgeschlossen. Das niederländische Unternehmen ist auf intellig… First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/08/06/hiscout-schliesst-partnerschaft-mit-intelli-systems-ab/
Navigating the GRC landscape: Insights from Mark Weatherford, former deputy under secretary for cybersecurity

Aug 7, 2024 9:36 PM

by

Andy Stern

in SecurityNews

Tags: cybersecurity, grc

First seen on scmagazine.com Jump to article: www.scmagazine.com/perspective/navigating-the-grc-landscape-insights-from-mark-weatherford-former-deputy-under-secretary-for-cybersecurity
Privacy and Ethical Concerns Around AI

Jul 25, 2024 3:37 PM

by

Andy Stern

in SecurityNews

Tags: ai, governance, grc, group, guide, international, privacy, risk, usa

Risks of, and principles to guide, AI development Camden Woollven is GRC International Group’s (IT Governance USA’s parent company) head of AI. She’s … First seen on itgovernanceusa.com Jump to article: www.itgovernanceusa.com/blog/privacy-and-ethical-concerns-around-ai
First 5 steps on your GRC journey

Jul 4, 2024 8:47 PM

by

Andy Stern

in SecurityNews

Tags: grc

First seen on scmagazine.com Jump to article: www.scmagazine.com/resource/first-5-steps-on-your-grc-journey
Building a mature (and effective) GRC program: A checklist

Jul 4, 2024 8:47 PM

by

Andy Stern

in SecurityNews

Tags: grc

First seen on scmagazine.com Jump to article: www.scmagazine.com/resource/building-a-mature-and-effective-grc-program-a-checklist
Hiscout und PwC Deutschland bündeln Kräfte für effizienteres Management im Cybersecurity-Umfeld

Jun 26, 2024 1:41 PM

by

Andy Stern

in SecurityNews

Tags: cybersecurity, germany, grc, software

Hiscout, führender Anbieter von GRC-Software, und PwC Deutschland haben eine strategische Partnerschaft geschlossen. Gemeinsam wollen die Unternehmen … First seen on netzpalaver.de Jump to article: netzpalaver.de/2024/06/18/hiscout-und-pwc-deutschland-buendeln-kraefte-fuer-effizienteres-management-im-cybersecurity-umfeld/
Effective GRC programs rely on team collaboration

May 28, 2024 5:20 AM

by

Andy Stern

in SecurityNews

Tags: grc, risk

One in three organizations are not currently able to proactively identify, assess, and mitigate risk with their GRC program, nor are they able to ensu… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/24/grc-program-spending/
How a GRC consultant passed the CISSP exam in six weeks

May 16, 2024 7:06 AM

by

Andy Stern

in SecurityNews

Tags: grc

Ask any IT security professional which certification they would consider to be the gold standard in terms of prestige, credibility, or difficulty, and… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/05/14/cissp-exam-experience/
Safeguard your SAP environment

Apr 30, 2024 7:40 PM

by

Andy Stern

in SecurityNews

Tags: grc, sap

Safeguarding Your SAP Environment:SafePaaS GRC IntegrationIn the intricate tapestry of enterprise operations, SAP solutions often form the backbone, w… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/safeguard-your-sap-environment/