Browse by Tags

All Tags » GRC (RSS)

Making Holistic GRC a Business Reality

We've all heard lots of hype around the topic of GRC lately (Governance, Risk Management, and Compliance). Yet, sometimes hype occurs because there are significant business benefits associated with a technology area, and this is the case with GRC. The challenge, though, with IT GRC is that there...

Posted to CA on Security Management (Weblog) by Sumner Blount on 10-13-2010
How to set up a GRC framework

On my recent visit to Mumbai for the ISACA Mumbai Chapter annual conference I had an opportunity to discuss how to develop a GRC framework and it was caught on video. If GRC is on your agenda, especially if you are in banking this video will be a good investment of a few minutes of your time. http:/...

Posted to CA on Service Management (Weblog) by Robert Stroud on 09-28-2010
CA Technologies and SAP Collaboration in GRC – A view from the trenches

You may have seen an important announcement from CA Technologies and SAP today, which can be found here . An analyst reaction to this announcement from Michael Rasmussen of Corporate Integrity can be found here . Michael is one of the most respected analysts in GRC, so his opinion often carries a significant...

Posted to CA on Security Management (Weblog) by Sumner Blount on 07-14-2010
GRC: The Agile Market

A recent blog post http://bit.ly/bVd2i1 from Forrester Research made some very useful points, in my opinion. The focus of the article was on flexibility, in two key respects. First, flexibility is a key requirement of any GRC program, primarily because the demands for risk and compliance are so fluid...

Posted to CA on Security Management (Weblog) by Sumner Blount on 02-03-2010
The Shortcut to Control Rationalization

The Problem The Chief Information Security Officer (CISO) is given the mandate to ensure the IT department is compliant with these four authority documents: SOX, COBIT, PCI and ISO 27001. The OLD Answer The CISO reads and analyzes each of these documents and identifies the “thou must…” and “thou shall...

Posted to CA on Security Management (Weblog) by Mike Hoefgen on 01-26-2010
Bridging the Gap from IT Security to Financial Process Controls

Many agencies have a good handle on IT security, with the FISMA guidelines spelled out in great detail. However, with the advent of the new financial stimulus packages, there is a greater impetus to streamline the process around managing financial controls. Traditionally, financial process controls and...

Posted to CA on Security Management (Weblog) by Allan Gajadhar on 01-19-2010
Policy Lifecycle: GRC and Security Controls

In my numerous discussions with clients, I tend to find a recurring theme of organizations attempting to bridge the gap between business policies tied to regulations and security controls through a process called “The Policy Lifecycle.” The origin of this lifecycle starts with any number of groups that...

Posted to CA on Security Management (Weblog) by Joann Kenny on 01-12-2010
EMC/RSA/Archer: The GRC Consolidation Trend Continues

On Jan 4, 2010, the RSA division of EMC announced the acquisition of Archer Technologies, a privately-owned GRC provider based in Kansas. The press release can be found here . Although an unexpected move, this acquisition is very understandable considering the market position of EMC/RSA and Archer. EMC...

Posted to CA on Security Management (Weblog) by Sumner Blount on 01-07-2010
Sarbanes-Oxley – Unconstitutional?

As previewed by Sumner Blount in his November 30 th blog post , the Supreme Court on December 7 th heard opening arguments challenging the constitutionality of the 2002 Sarbanes-Oxley Act, which came out of the scandalous collapses of Enron, WorldCom, Tyco and other companies early this decade. At issue...

Posted to CA on Security Management (Weblog) by Chris Stoneley on 12-29-2009
Musings from a Recent GRC Conference

I recently attended and spoke at MIS Training Institute’s Governance, Risk, and Compliance 2009 conference held in Orlando. My speaking opportunity consisted of a one-day workshop on GRC for individuals focused on audits and assessments. Nine “students” representing different industries, geographies...

Posted to CA on Security Management (Weblog) by Christopher Daugherty on 12-17-2009

Page 1 of 16 (159 items) 1 2 3 4 5 Next > ... Last »