Upcoming Events . . .

Latest Pontifications & Thoughts . . .

  • Increasing Exposure of Third Party Risks 

    Increasing Exposure of Third Party Risks 

    The Modern Organization is an Interconnected Mess of Relationships Brick and mortar business is a thing of the past: physical buildings and conventional employees no longer define an organization. The… Continue reading Increasing Exposure of Third Party Risks 

  • GRC in Uncertain Times: 2016 and into 2017

    GRC in Uncertain Times: 2016 and into 2017

    In the past month there have been a lot of posts, articles, and discussion on the impact of Trump’s presidency on the GRC market, particularly compliance. Some fear that the need… Continue reading GRC in Uncertain Times: 2016 and into 2017

  • How to Identify UBOs in an Unpredictable World

    How to Identify UBOs in an Unpredictable World

    Business operates in a world of chaos, where relationship risk is ever present. What’s the secret to understanding and identifying ultimate beneficial owners? The modern organization is an interconnected web… Continue reading How to Identify UBOs in an Unpredictable World

  • The Role of Technology in Compliance Risk Management

    The Role of Technology in Compliance Risk Management

    Organizational exposure to compliance risk is rising while the cost of compliance soars. An ad hoc or reactive approach to compliance brings complexity, forcing business to be less agile. Organizations… Continue reading The Role of Technology in Compliance Risk Management

  • Compliance: An Integral Part of Risk Management

    Compliance: An Integral Part of Risk Management

    Increased regulatory and ethical pressures are transforming the traditional role of compliance. Compliance departments are taking on broader responsibility for ethics, compliance, corporate culture, and social responsibility. With greater frequency,… Continue reading Compliance: An Integral Part of Risk Management

  • Compliance and Risk Bear Down on the Organization 

    Compliance and Risk Bear Down on the Organization 

    Compliance in Dynamic and Distributed Business Compliance is not easy. Organizations across industries have global clients, partners, and business operations. The larger the organization the more complex its operations. Adding… Continue reading Compliance and Risk Bear Down on the Organization 

  • Complexities of IT GRC Hinders Organizations 

    Complexities of IT GRC Hinders Organizations 

    Organizations operate in a complex environment of risk, compliance requirements, and vulnerabilities that interweave through departments, functions, processes, technologies, roles, and relationships. What may seem as an insignificant IT risk… Continue reading Complexities of IT GRC Hinders Organizations 

  • Policy Management Demands Attention

    Policy Management Demands Attention

    The Foundational Role of Policies in GRC Strategies Policies are critical to the organization as they establish boundaries of behavior for individuals, processes, relationships, and transactions. Starting at the policy… Continue reading Policy Management Demands Attention

  • Information Security in Context: The CISO as a Transformational Role in Risk Management

    Information Security in Context: The CISO as a Transformational Role in Risk Management

    Information Security at the Center of Risk Chaos Inevitable Failure: Managing Information Risk in a Silo Organizations are complex. Exponential growth and change in technology, vulnerabilities, regulations, globalization, distributed operations,… Continue reading Information Security in Context: The CISO as a Transformational Role in Risk Management

  • The GRC Economy

    I am often asked, “What do you do?” My simple answer, that I do not like, is to say that I am a consultant. This does not always help as… Continue reading The GRC Economy

  • IT GRC Management by Design, New York

    IT GRC Management by Design, New York

    Organizations are complex. Exponential growth and change in technology, vulnerabilities, regulations, globalization, distributed operations, changing processes, competitive velocity, business relationships, legacy technology, and business data exposes organizations of all sizes.… Continue reading IT GRC Management by Design, New York

  • The Critical Foundation of Third Party Management is Technology

    The Critical Foundation of Third Party Management is Technology

    In previous posts we looked at the following: How to Develop a Third Party Management Strategy How to Define a Third Party Management Process Lifecycle Now we turn our attention… Continue reading The Critical Foundation of Third Party Management is Technology