Browse by Tags

All Tags » GRC » Compliance (RSS)

GRC: The Agile Market

A recent blog post http://bit.ly/bVd2i1 from Forrester Research made some very useful points, in my opinion. The focus of the article was on flexibility, in two key respects. First, flexibility is a key requirement of any GRC program, primarily because the demands for risk and compliance are so fluid...

Posted to CA on Security Management (Weblog) by Sumner Blount on 02-03-2010
The Shortcut to Control Rationalization

The Problem The Chief Information Security Officer (CISO) is given the mandate to ensure the IT department is compliant with these four authority documents: SOX, COBIT, PCI and ISO 27001. The OLD Answer The CISO reads and analyzes each of these documents and identifies the “thou must…” and “thou shall...

Posted to CA on Security Management (Weblog) by Mike Hoefgen on 01-26-2010
Policy Lifecycle: GRC and Security Controls

In my numerous discussions with clients, I tend to find a recurring theme of organizations attempting to bridge the gap between business policies tied to regulations and security controls through a process called “The Policy Lifecycle.” The origin of this lifecycle starts with any number of groups that...

Posted to CA on Security Management (Weblog) by Joann Kenny on 01-12-2010
EMC/RSA/Archer: The GRC Consolidation Trend Continues

On Jan 4, 2010, the RSA division of EMC announced the acquisition of Archer Technologies, a privately-owned GRC provider based in Kansas. The press release can be found here . Although an unexpected move, this acquisition is very understandable considering the market position of EMC/RSA and Archer. EMC...

Posted to CA on Security Management (Weblog) by Sumner Blount on 01-07-2010
Musings from a Recent GRC Conference

I recently attended and spoke at MIS Training Institute’s Governance, Risk, and Compliance 2009 conference held in Orlando. My speaking opportunity consisted of a one-day workshop on GRC for individuals focused on audits and assessments. Nine “students” representing different industries, geographies...

Posted to CA on Security Management (Weblog) by Christopher Daugherty on 12-17-2009
Spreadsheet and Email for Compliance: Yes They Are Still Here

All product vendors must correctly articulate how a product’s capabilities address a real customer need in order to be successful in the marketplace. This is the fundamental basis to marketing and product positioning – and to winning in a product category. The vendor’s challenge is keeping current with...

Posted to CA on Security Management (Weblog) by Merritt Maxim on 11-05-2009
Making Sense of GRC Data: What to Look for in Dashboards and Reports

It’s All About the Data One of the great challenges in consolidating governance, risk, and compliance efforts across an organization is the centralization of all of the GRC relevant information. GRC touches nearly every aspect of your business, from the ‘tone at the top’ to the test results from a given...

Posted to CA on Security Management (Weblog) by Peter Stapleton on 11-03-2009
Gramm-Leach-Bliley: Improved Consumer Protection, or a Recipe for Disaster?

The Gramm-Leach-Bliley Act (GLBA), also known as the Financial Modernization Act, was enacted in 1999. As someone who has worked in and around the area of compliance for several years, I have always viewed GLBA primarily as a regulation that attempted to increase the security and privacy of consumer's...

Posted to CA on Security Management (Weblog) by Sumner Blount on 09-30-2009
Why Content is King for GRC

When you open Microsoft Word, Excel, or PowerPoint, what do you see? You see a blank screen representing a sheet of paper, a blank spreadsheet, or a blank presentation. At this point you can either create your own document or open another file. If you're like me, you prefer starting with another...

Posted to CA on Security Management (Weblog) by Mike Hoefgen on 09-24-2009
Expert Q and A: Greenlight Technologies on the Renewed Interest in FCPA

Niranjan Bopardikar, director of GRC product strategy for Greenlight Technologies, shares his answers to some top-of-mind questions regarding the Foreign Corrupt Practices Act (FCPA) in this guest Q&A. What is the FCPA? FCPA stands for "Foreign Corrupt Practices Act". The United States...

Posted to CA on Security Management (Weblog) by CA GRC Blog Admin on 09-22-2009

Page 1 of 7 (61 items) 1 2 3 4 5 Next > ... Last »