risk management Archives - Page 2 of 2 - HALOCK

Incident Response Hotline: 800-925-0559

Lessons in Risk Management: What We Should Learn from the FAA Fire

Too often in information security we focus on the confidentiality of (more…)

Cindy Kaplan2024-06-28T19:10:45+00:00Categories: Governance & Risk Management, Risk Assessments|Tags: FAA, information risk, Risk Assessments, risk management, security incident|

Common Hazards in Risk Management: The Selfish Risk Assessment

Information security laws and regulations are telling us to conduct cyber (more…)

Cindy Kaplan2024-07-03T19:22:46+00:00Categories: Governance & Risk Management, Risk Assessments|Tags: Breach, identity Theft, Information Security, ISO 27005, NIST SP 800-30, Risk Assessment, risk management|

Your Policies Can Hurt You, Part 1: The Importance of Well-Tailored Instructions

GRC compliance

Cindy Kaplan2024-06-28T19:33:12+00:00Categories: Governance & Risk Management|Tags: Audit, Compliance, governance, liabilities, Risk Assessment, risk management, security policies|

Risk Acceptance Levels: Managing the Lower Limits of Security Costs

Last week I presented a topic here at Halock’s blog site (more…)

Cindy Kaplan2024-07-03T19:22:46+00:00Categories: Duty of Care Risk Assessment (DoCRA), Governance & Risk Management, Reasonable Security | Reasonable Risk, Risk Assessments|Tags: impact, Information Security, reasonable and appropriate, risk, Risk Assessment, risk management, risk register, the hand rule|

We Need a Risk Management Tipping Point

While preparing for a keynote talk at CAMP IT that is (more…)

Cindy Kaplan2024-08-13T20:30:46+00:00Categories: Governance & Risk Management, HIPAA Compliance|Tags: HIPAA, inefficiency, Information Security, Risk Assessment, risk management, security, SOC 2|

UNLIMITED SECURITY BUDGETS AND PERFECT SECURITY

Perfect security is not possible, feasible nor (more…)

Cindy Kaplan2024-07-03T19:22:46+00:00Categories: Governance & Risk Management, Risk Assessments|Tags: Compliance, due care, Perfect security, reasonable and appropriate, Risk Assessment, risk management|

Nice Infrastructure…. Mind If I Borrow it??

We talk a lot with our clients about the importance of (more…)

Cindy Kaplan2024-07-03T19:22:46+00:00Categories: Governance & Risk Management, Incident Response, Modern Malware, Risk Assessments|Tags: botherder, botmaster, due care, due diligence, malware, modern malware, risk management|

Where does Data Loss Prevention (DLP) fit into a Risk Management Framework?

As stated in a previous post, effective Data Loss Prevention (DLP) (more…)

Cindy Kaplan2024-06-28T20:50:48+00:00Categories: Governance & Risk Management|Tags: framework, policy, Risk Assessment, risk management|