Homepage Slideshow
Enabling GRC with Secure Authentication Across the Digital Ecosystem
Free CPE Webinar on May 30th at 1pm Eastern. Reserve your seat now!
Mastering Vendor Risk Management
Available for viewing Now On-Demand!
Implementing a NIST Framework for Adaptive Cybersecurity...
On-Demand!
White Paper: Revitalizing Access Control Programs
Available to download now!
Learn How to Survive a Data Breach in 2019...
Now On-Demand!
White Paper: Taking Command of Your GRC Journey
Download Now!
Gain a Birds Eye View of Enterprise GRC
GRC Evolution in Digital Enterprises as ERM and Cyber Security Converge. Watch Now On-Demand!
White Paper: Effectively Managing Privacy Risk in Processing Personal Data
Download Now!
Evolving an Enterprise Risk Management Program
Watch this 5 Star Rated webinar Now On-Demand!
Striving for Data Security in the Cloud
IT Security & Privacy Governance in the Cloud.
http://www.executiveitforums.org/index.php?option=com_content&view=article&id=7247:rsvp&catid=438
Latest News
- GozNym malware cybergang taken down
- US Congress launches fintech and AI task forces
- Swift on the hunt for new IT talent
- Hackers breach Binance to steal $40 million of bitcoin in a single transaction
- Citi launches real-time data validation service for institutions
- IBM and Thomson Reuters team on AI and data-driven compliance offering
- UK banks must collaborate with fintechs to transform payments industry
- Equifax buys PayNet
- AxiomSL Recognized for Exemplary Information Security Practices with ISO 27001 Certification
- Automation could displace 40 FS industry job roles - Ernst & Young
- Canadian regulators ink cooperation deal with UK's FCA on sandbox initiative
- Accuity Launches AI-Powered Financial Crime Compliance Screening to Detect and Prioritise Highest Risk Individuals
- European regulators advise against one-size-fits-all cybersecurity policy
- Swift says cyber threats evolving
- Prometeia and The Council partner to provide Risk and Compliance solutions in the Nordics
- Big banks back new international blockchain alliance
- TSB to take technology inhouse after IT meltdown
- Twelve US banks join Know-Your-Vendor data hub
- EMVCo to develop standards for consumer device verification
- Criminals stole £1.2 billion from UK bank accounts in 2018
On-Demand
-
Key Steps to Identify Risk and Master Vendor Risk ManagementRecorded: April 25 | 2019 Attend
In today’s interconnected technology ecosystem, companies increasingly rely on third party vendors to meet their operational needs. However, the current state of vendor risk management (VRM) is bleak. More than half of all information security breaches are caused by third-party vendors, and according to Deloitte 83% of today’s business leaders lack confidence in third party VRM processes.
-
Implementing a NIST Framework for Adaptive CybersecurityRecorded: March 21 | 2019 View
In an age where cybersecurity threats are an everyday fact of life, organizations are looking for solutions that enable them to predict, prepare and react to the shifting landscape of cyber threats, and implementation of adaptive cyber security strategies is becoming inevitable to achieve that goal.
-
Revitalizing Access Control Programs: Intelligent AutomationRecorded: March 7 | 2019 View
Access control, a critical component of IT security compliance programs, ensures that organizations protect confidential information, like intellectual property and customer data. But your access management program can easily become outdated and static—especially if you rely on manual control testing and user access administration tasks.
-
Critical Actions to Survive a Data Breach in 2019 and BeyondRecorded: January 17th | 2019 View
With large-scale data breaches continuing to make the headlines in 2018, Today’s organizations face a cybersecurity landscape more difficult to navigate than ever before. When it comes to data breaches, the risk for organizations is high, from the easily calculable costs of notification and business loss to the less tangible effects on a company's brand and customer loyalty. Cyberattacks that target and infiltrate critical infrastructure are very real and for the United States, it’s not a matter of if, but when.
-
Critical Actions to Prevent a Data Breach in 2019 and Beyond
Recorded: November 29 | 2018 Attend
Today’s organizations face a cybersecurity landscape more difficult to navigate than ever before. When it comes to data breaches, the risk for organizations is high, from the easily calculable costs of notification and business loss to the less tangible effects on a company's brand and customer loyalty. With large-scale data breaches continuing to make the headlines in 2018, organizations must be proactive, not reactive, in the face of looming cyber threats. Proactive threat intelligence can enable organizations to prevent breaches or compromises before they occur.
-
Compliance vs Risk: Aligning Priorities & Prioritizing ThreatsRecorded: September 27 | 2018 Attend
Compliance is a fundamental pillar to effective risk management at any company. However, simply complying with laws and regulations without considering the broader threat landscape can result in disaster. Certainly, a balance between compliance and risk is necessary. Ensuring compliance represents an organization's starting point, not the endgame, should be a priority.
-
GDPR 101: Managing Data Risk & Maintaining Compliance After DeadlineRecorded: August 28 | 2018 Attend
Achieving and maintaining GDPR compliance is a complex and expensive initiative for companies of all sizes, across all geographies and industries, and tech giants have already been sued for violating the terms, while major newspapers have been forced to restrict EU access to their websites for fear of noncompliance.
-
Post-GDPR: Key Steps to GRC IntegrationRecorded: July 26 | 2018 Attend
Data protection laws such as the General Data Protection Regulation (GDPR) are complex, and can impact a broad range of business roles, including legal, audit, HR and finance, not just IT. In achieving GDPR compliance, organizations should focus on getting these roles to work together in ongoing efforts to ensure governance, risk and compliance (GRC) across an organization, and not be distracted by the noise in the marketplace.
-
Practical Steps to Scale Your Vendor Risk Management Program
Recorded: June 26 | 2018 Attend
As organizations rely on third parties to grow and thrive, they’re exposed to major cybersecurity risks. Mitigating this risk means confronting the potential security vulnerabilities that are present in your third party network, but traditional vendor risk management (VRM) methods are no match for modern threats. According to Deloitte 83% of today’s business leaders lack confidence in third party VRM processes.
-
Best Practices for GRC Implementation and Enterprise SecurityRecorded: June 5 | 2018 Attend
In today’s world, implementing an effective GRC program is critical for every organization striving to secure the enterprise in an era of increasingly frequent and complex cyber threats. However, getting budget approval, organization buy-in and executing on a successful implementation can be daunting tasks to take on.
-
GDPR Compliance MasterClass
Recorded: April 24 | 2018 Attend
The GDPR is the most significant change in data privacy regulation in more than 20 years. It comes into force on 25 May 2018 and will impact all businesses that process personal data or businesses that process personal data of EU citizens even if they are not in the EU. Obligations for compliance will affect both controller and processors and regulators will get increased enforcement powers and the right to impose fines of up to 4% of global turnover for both data breaches and infringements of the law.
-
Enabling Cybersecurity: Ignite Your ERM ProgramRecorded: March 22 | 2018 Attend
Effective risk management is critical for every organization, especially in the current era of increasingly frequent and complex cyber threats. Organizations with the ability to detect changes across global IT environments in real time can better prevent and respond to malicious acts such as ransomware/malware attacks and configuration tampering.
Visionaries
-
Steve Durbin is Vice President of the Information Security Forum (ISF). His main areas of focus include the emerging security threat landscape, Cyber ...
-
Adrian Lane is the CTO and Security Analyst at Securosis. He is a Senior Security Strategist with 25 years of industry experience. He brings...
-
Rebecca Herold, CISM, CISSP, CISA, CIPP, FLMI. Rebecca is an information privacy, security and compliance consultant, author and instructor who has pr...
-
Ed Ferrara is Principal Analyst for Security and Risk at Forrester Research. He contributes to Forrester's offerings for the Security & Risk Profe...
-
Chris McClean contributes to Forrester's offerings for the Security & Risk professional, leading the company's coverage of governance, risk, and c...
-
Derek Brink is the Vice President and Research Fellow at Aberdeen group. He is a senior high-tech executive experienced in strateg...
-
John Kindervag is a Senior Analyst at Forrester serving Security & Risk professionals. He is a leading expert on wireless security, network s...
-
Branden Williams has over fifteen years of experience in technology and information security with a formidable background in the majority of the techn...