Risk
Risk refers to threats an organization faces -- loss of earnings, loss of reputation, or harm of any kind. These articles explore the challenges of preventing, identifying and mitigating risk.
Risk can come in many forms, including financial issues, legal liabilities, strategic or leadership errors, or accidents and natural disasters. Today, IT- and data-related risks are growing concerns.
The following articles about risk look at the issue from many angles, especially from that of compliance officers and risk managers.
ESG Screening Underscores Challenges in Third-Party Risk Management
Nearly half of compliance and procurement professionals find it difficult to identify environmental, social and governance within customer due diligence processes. Brian Alster discusses this and other findings from a recent Dun & Bradstreet survey. There is little doubt amongst supply chain industry experts that knowing and actively managing potential risk is essential to the success of an entire supply...
Innovation: The Organization’s Lifeblood
Innovation is the lifeblood of every organization. An innovative culture is what sustains reinvention and even the organization itself. In the digital age, executive management and the board have an important role to play in strengthening and nurturing this culture. Jim DeLoach discusses how. Digital transformation is disrupting entrenched incumbents and even entire industries as the pace of change impacts...
E&C Practitioners’ Greatest Challenge: Role vs. Reputation
Compliance training expert Ronnie Feldman explores the fundamental misunderstanding of ethics and compliance’s role and function in the organization, which must be overcome to successfully mitigate risk. You are smart. You’ve got a welcoming smile. You have interesting anecdotes. You’re a snappy dresser with a quick wit. And to top it all off, your role in the organization is to provide...
With Rising Regulatory Pressures, Risk Programs are Running Hard to Stay in Place
Santa Fe Group’s Gary Roboff and Protiviti’s Paul Kooney discuss today’s increasingly fraught risk environment. Among the findings from a recent study: There’s a growing need for robust third-party risk management and greater board engagement. Increasing risk and regulatory pressure pose severe challenges to vendor risk management programs and largely offset gains in program effectiveness and efficiency, according to the...
Red Box Announces Partnership With Theta Lake To Reduce Compliance Risk
London (May 15, 2019) – Red Box, the leading platform for voice, today announces a partnership with Theta Lake, a leader in compliance artificial intelligence (AI) for video, voice, and unified digital communication. This partnership allows Red Box’s customers to take advantage of Theta Lake’s purpose-built AI and Deep Learning-powered software to automatically detect compliance risks in their recordings, and significantly...
DOJ’s Risk Assessment Expectations in “Evaluation of Corporate Compliance Programs”
Kaplan & Walker’s Jeff Kaplan discusses the Department of Justice’s recent updates to its guidelines for evaluating the effectiveness of corporate compliance programs in the context of an investigation. Editor’s note. Later this month CCI will publish the second and expanded edition of Jeff Kaplan’s popular e-book Compliance & Ethics Risk Assessment: Concepts, Methods and New Directions. Today’s post is...
How CISOs Can Effectively Convey Information Security Risk to the Board
Effective leaders understand that boards are comprised of people with different skills and areas of expertise – often without the acumen to understand the details of security and risk the way a security or risk professional does. Lockpath’s Sam Abadir offers guidance on bridging that gap. Communicating risk posture and assessments to the highest levels of an organization is a...
Ponemon on Third-Party IoT Risk: Companies Don’t Know What They Don’t Know
Third-Party Risk Factors Require More Board Level Attention on IoT Security Santa Fe, NM (May 7, 2019) – The Santa Fe Group, authorities in risk management and the managing agent of the Shared Assessments Program today released the results of the Third Annual Ponemon Institute’s study on Third-Party Risk for the Internet of Things (IoT). Ponemon reports a dramatic increase in IoT-related...
Threat Horizon 2021: The Cyber Attacks Businesses Need to Prepare for Now
ISF’s Steve Durbin details findings from the firm’s recent Threat Horizon 2021 report, highlighting the top three threats to information security emerging in the next two years.
Despite Growing in Maturity, Work Remains for ERM
A Gartner survey of more than 100 organizational risk leaders shows that ERM is maturing as a function. As Gartner’s Matt Shinkman explains, the ERM function still has a long way to go to complete its integration into key business activities, however.
How Compliance Can Empower the Business to Manage Risk
Compliance professionals still “own” too many risks that business units could manage more effectively. Gartner’s Brian Lee discusses one solution: moving ownership of compliance risks closer to their sources. It’s a time of enormous change for organizations of every type. Gartner’s 2018 survey of CEOs shows that CEOs, who have been focused on growth for years, are now prioritizing firm...
Disruptive Innovation Tops List of Threats to Companies – Is Your Organization Thinking and Acting Digital?
The digital revolution is transforming our world. Protiviti’s Jim DeLoach shares how, over the next few years, many organizations will need to undertake radical change programs and – in some cases – completely reinvent themselves to remain relevant and competitive. Is disruptive innovation sufficiently emphasized on the board agenda and in the C-suite? Ask executives and directors what their company’s...
