A security flaw is once again forcing us to change our passwords and contact vendors. Nearly 3,400 websites, including Uber, Bain Capital, Security Scorecard, Bitsight, and Fitbit,[i] may have been affected by “cloudbleed,” a vulnerability affecting user data at sites using the Cloudflare security service. User data at these sites was published to the public […]
Risk management is about more than risks—it’s about understanding the interrelationship between those risks and your institution’s risk appetite and goals. But what’s the best way to effectively manage those risks? This webinar will explore different approaches to risk management—including Enterprise Risk Management (ERM) and Governance, Risk and Compliance (GRC)—to help you: Differentiate between GRC […]
In this recorded webinar, Ncontracts CEO Michael Berman will discuss ways to develop a risk assessment framework that stratifies vendors based on their risk to the organization and consistency with your overall strategic objectives.
In offices and on conference calls across America, salespeople are plotting to baffle financial institutions with an acronym created not by regulators, but by marketing personnel. It’s not hard. Compliance and risk management are already mysterious—up there with Big Foot, the Loch Ness monster, the origin of Stonehenge and whether or not your cat actually […]
For years regulatory agencies, including the Office of the Comptroller of the Currency, have emphasized the importance of enterprise risk management (ERM) at financial institutions. Now the OCC is taking its own advice—and sharing its findings. The agency’s recently released “Enterprise Risk Appetite Statement1” is the work of its Office of Enterprise Risk management, a […]