Information Management

FILTER BY:
A new renaissance in risk management blog

Read more
Building (and Maintaining) a Modern-Day Compliance & Ethics Program event Workshop
Tuesday February 12, 2013 9:30am - 1:30pm

Datacert's second stop of the Building (and Maintaining) a Modern-Day Compliance & Ethics Program multi-city roadshow!

Date: Tuesday, February 12, 2013
Time: 9:30 am - 1:00 pm
Where: Conrad New York
102 North End Avenue
New York, NY 10282

Agenda

9:30 am - Welcome and Introductions

10:00 am - Building (and Maintaining) a Modern-Day Compliance & Ethics Program

Read more
Building (and Maintaining) a Modern-Day Compliance & Ethics Program event Workshop
Wednesday January 23, 2013 9:30am - 1:00pm
Join Datacert on our first stop of the Building (and Maintaining) a Modern-Day Compliance & Ethics Program multi-city roadshow! This half-day seminar features a discussion and Q&A session with GRC expert Michael Rasmussen as he shares what it takes to build and sustain a modern-day compliance and ethics program.

Date: Wednesday, January 23, 2013
Time: 9:30 am - 1:00 pm
Where: Hosted at the NetApp corporate headquarters
495 East Java Drive
Sunnyvale, CA 94089

Agenda

9:30 am - Welcome and Introductions

10:00 am - Building (and Maintaining) a Modern-Day Compliance & Ethics Program

Read more
The Network Policy Management

  • IT.22 - Policy Mgmt, Communication & Training
  • M1. Context Monitoring
  • P1. Proactive Actions & Controls
  • I2. Communication
  • M2. Performance Monitoring
  • P2. Codes Of Conduct
  • C3. Culture
  • M3. Systemic Improvement
  • P3. Policies
  • R3. 3rd Party Inquiry & Investigation
  • M4. Assurance
  • P4. Education
  • P5. Incentives
Read more
The Network Reporting & Analytics

  • IT.05 - Compliance Management
  • IT.07 - Control Activity, Monitoring, and Assurance
  • IT.13 - Fraud and Corruption Detection, Prevention & Mgmt
  • IT.15 - Hotline/Helpline
  • IT.17 - Insurance & Claims Management
  • IT.19 - Issue and Investigations Management
  • IT.20 - Matter Management
  • IT.21 - Physical Security & Loss Management
  • IT.22 - Policy Mgmt, Communication & Training
  • IT.27 - Strategy, Performance, and Business Intelligence
  • D1. Detective Actions & Controls
  • I1. Info Management
  • M1. Context Monitoring
  • O1. Commitment
  • M2. Performance Monitoring
  • D3. Inquiry
  • I3. Technology
  • M3. Systemic Improvement
  • M4. Assurance
Read more
Emerging risk or head-in-sand risk? blog

Too many people are getting distracted by so-called emerging risk that is little more than head-in-sand risk. Why? Because most all emerging risks simply aren't new, they are just knew to someone who didn't do a good job of risk evaluation.

What is a "oops"? The risk that was missed.

Read more
ISM Advisory and/or Audit Firm
GRC Illustrated Series: #7 What Are The Elements Of Privacy Risk Management And Compliance? resource GRC Illustrated Member contributionOCEG Reviewed
Thumbnail
By Scott Mitchell
Read more
Learn from the experience of others and share your experience! blog

Have you ever asked your peers or professional colleagues what risk management or compliance tools they use?  We value the ground well tread because we know that learning comes from making mistakes.  How would you like to know what 1000's of your peers are saying about GRC ven

Read more
WYSIATI - Jumping to Conclusions with Limited Evidence blog

Over confidence in our ability to assess risks has led to more mistakes than we care to admit.  WYSIATI - "What You See Is All There Is"  describes a set of biases that prevents us from becoming better risk managers.  Why is this the case?  Because we jump to conclusions based on weak evidence and confuse correlation with causation. 

Read more
Syndicate content