Risk Management Blog and Articles

Executive Order 14028, titled Improving the Nation’s Cybersecurity, seeks to enhance the security and integrity of the software supply chain.

Third party risk management and NIST: Learn how to evaluate vendor compliance with security, regulatory, and privacy requirements.

Here’s everything you need to know about the CMMC and how it impacts your third-party risk management (TPRM) strategy.

What's the impact of privacy regulation in the use of service providers? Here's what you need to know about GDPR and third party vendors.

In Utilities, there's a saying that “Safety is everybody’s business”. At some level, cybersecurity is becoming a part of everyone’s job too.

On January 1, 2020 the California Consumer Privacy Act (CCPA) of 2018 came into effect. Although it impacts thousands of businesses across the country, with stiff financial penalties, many business leaders are still unsure about what it means. This blog looks at some key points of the law and its impact on third-party risk management.

Discussions on privacy laws have taken front and center in recent weeks as GDPR (General Data Protection Regulation) begins to be enforced by European Union (EU) member states on May 25, 2018.  As we have been discussing for a while, there is confusion as data collectors try to figure out the impact of this legislation.  There is no question that large, multi-national corporations will have to comply and many of these corporations are already in compliance.  However, with this deadline just around the corner, smaller companies that do not actively target EU residents are struggling with how this legislation impacts them. Until […]