Landing Pages
How to present cyber risk to the board with confidence
|
The IT GRC Forum is the premier online resource for Governance, Risk Management, and Compliance (GRC) Executives. We produce educational events and provide market intelligence for our members, and offer CPE credits via our programs. Executive IT Forums, Inc, is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education.
The Forrester New Wave™: Cybersecurity Risk Rating Solutions, Q4 2019
|
pdf
The Forrester New Wave™: Cybersecurity Risk Rating Solutions, Q4 2018
(703 KB)
The Nine Providers That Matter Most And How They Stack Up
In Forrester’s evaluation of the emerging market for cybersecurity risk rating solutions, we identified the nine most significant providers in the category — Bitsight, Fico, iTrust, Normshield, Panorays, Prevalent, Riskrecon, SecurityScorecard, and upGuard — and evaluated them. This report details our findings about how well each vendor scored against 10 criteria and where they stand in relation to each other. Security and risk (s&r) professionals can use this review to select the right partner for their cybersecurity risk rating solution needs.
Key Takeaways
Forrester’s research uncovered a market in which Bitsight, RiskRecon, Prevalent, and SecurityScorecard are leaders; Panorays and Fico are strong Performers; and upGuard, Normshield, and iTrust are challengers. Risk Analytics, entity Attribution, and Rating Consistency are key differentiators. The best cyber-risk rating solutions don’t merely report on your third-party partners’ security flaws, they contextualize and prioritize the risk information they collect so you can more strategically allocate resources and mitigate risk.
pdf Download (703 KB)
About the IT GRC Forum
The IT GRC Forum is an online resource and networking platform for Governance, Risk Management, and Compliance (GRC) Professionals. We produce educational events and provide market intelligence for our members, and it is our goal to help industry stakeholders, government regulators, and end-users better understand and manage the increasingly complex GRC landscape across their organization. Visit us at www.executiveitforums.org
GDPR for Third-party Risk Management eBook
|
pdf
GDPR for Third-party Risk Management eBook
(5.68 MB)
Everything you need to know to stay compliant
Europe’s GDPR is widely-discussed in today’s news cycles and for good reason. The regulation impacts many organizations throughout the world, and violations of the regulation can result in material fines. One big question remains for many businesses, how do third-party services fit into this new regulation and what can organizations do to protect themselves from third-party risks to meet the standards?
In this eBook we explore three key topics related to GDPR:
- How organizations go from violations to fines
- What the new fines mean for you and what your organization can do
- Third-party risk management obligations
pdf Download (5.68 MB) a complimentary copy of the eBook now to learn how to stay GDPR compliant.
About the IT GRC Forum
The IT GRC Forum is an online resource and networking platform for Governance, Risk Management, and Compliance (GRC) Professionals. We produce educational events and provide market intelligence for our members, and it is our goal to help industry stakeholders, government regulators, and end-users better understand and manage the increasingly complex GRC landscape across their organization. Visit us at www.executiveitforums.org
March 22 | 2018
|
||||
|
||||||||||||||
The IT GRC Forum is the premier online resource for Governance, Risk Management, and Compliance (GRC) Executives. We produce educational events and provide market intelligence for our members, and offer CPE credits via our programs. Executive IT Forums, Inc, is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education.. Visit us at Cloud Risk Surface Report
|
pdf
Cloud Risk Surface Report
(1.54 MB)
Navigating safely in cloudy condition
This report (re)uses the same data set behind the Internet Risk Surface Report. It is derived from RiskRecon’s work in providing companies objective visibility into their third-party cybersecurity risk. For each organization analyzed, RiskRecon trains machine learning algorithms to discover internet facing systems, domains, and networks. For every asset discovered, RiskRecon analyzes the publicly accessible content, code, and configurations to assess system security and the inherent risk value of the system based on attributes such as observable data types collected and transaction capabilities. RiskRecon provided Cyentia a large anonymized sample of their production data set for this research.
Having studied several broad aspects of the Internet risk surface, we now seek to narrow the focus to consider how the cloud shapes that surface. The benefits of migrating data, workloads, applications, and business processes to the cloud are incredibly compelling. But as a steady string of headlines reporting large data exposures from cloud environments suggest, those benefits don’t come risk-free. Is the risk worth it? To help you answer that for your organization, we leverage a massive dataset supplied by RiskRecon spanning 18,000 organizations and over 5 million hosts yielding 32 million security findings. Read on for a preview of the fascinating facts and figures we share in this report.
pdf Download (1.54 MB)
About the IT GRC Forum
The IT GRC Forum is an online resource and networking platform for Governance, Risk Management, and Compliance (GRC) Professionals. We produce educational events and provide market intelligence for our members, and it is our goal to help industry stakeholders, government regulators, and end-users better understand and manage the increasingly complex GRC landscape across their organization. Visit us at www.executiveitforums.org
CISOs in the Boardroom
|
March 22 Newsletter
|
Live Webinar! Harmonizing Insights From Your Cybersecurity Ecosystem
|
Harmonizing Insights From Your Cybersecurity EcosystemApril 24 | 2018
|
||||
|
||||||||||||||||||||||||
March 22 | 2018
|
||||
|
||||||||||||||
[CPE webinar] Automating user access reviews
|
April 24 | 2018
|
||||
|
||||||||||||||||||||||||
March 22 | 2018
|
||||
|
||||||||||||||