Companies see value in transitioning to a DevOps process model, which allows faster turnaround and less waste in the development process; however, this new model opens companies up to new security risks that need to be monitored as the development te...
With the increase of usage for IoT devices comes an increase in risk and vulnerabilities. Organizations face issues with prioritization of risk and vulnerabilities due to constraints with security resources. Finding a way to focus their attention on ...
Companies see value in IoT technology and data collection to improve processes and analyze trends. However, 35% of customers site security concerns and IoT implementations as a barrier to the organization. IoT products are extremely broad, examples i...
Organizations are often inundated with requests for information. These requests can come from within the organization or external to the organization from their clients, third parties, vendors, and so on. These requests are typically Requests for Inf...
Gifts, entertainment, and charitable donations are used frequently to build and maintain good relationships between an organization and the company's they do business with. However, if they are not managed properly, they can result in risks with conf...
Conflicts of interest exist throughout the commercial world. As new products, activities and strategies evolve to meet changing customer needs and market conditions, organizations need to be disciplined in continually searching for new conflicts and ...
Designing, operating, and using technologies in a way that is mindful to diverse privacy needs for an increasingly connected and complex environment can be a challenge. Developing technologies like the Internet of Things and artificial intelligence c...
Cybersecurity threats exploit the increased complexity and connectivity of critical infrastructure systems, which places national security, the economy, and public safety at risk. To combat these cyber risks, NIST (National Institute of Standards and...
Governing bodies such as the Office of the Superintendent of Financial Institutions (OSFI) in Canada and the Office of the Comptroller of the Currency (OCC) in the U.S. require organizations to implement and adhere to policies and procedures in regar...
Crowe LLP is a public accounting, consulting and technology firm with offices around the world. Crowe uses its deep industry expertise to provide audit services to public and private entities. The firm and its subsidiaries also help clients make smar...
Setting up, maintaining and changing the business hierarchy is a complex task for many organisations. Often, there is a need to document more than the three out-of-the-box levels and associate objects (risks, controls, etc.) to various levels of the ...
Archer enables organizations to automate a variety of business processes to address risk and compliance requirements. As an organization’s use of Archer grows, requests for new enhancements, changes to existing functionality, and the addition of new ...
The Archer Experts eDiscovery Management app-pack was designed to solve a common disconnect that users experience in Governance, Risk, and Compliance (GRC) systems regarding data privacy; separation from the actual data they are answering questions f...
Aujas is a cybersecurity engineering specialist, helping organizations manage information security risks by protecting data, software, systems and identities in alignment with best practices and compliance requirements. One of our services focuses on...
Strategic risk management is the process of identifying, assessing, and managing the risk in the organization's strategy that includes taking action when risks exceed the organization's tolerance. The first step to strategic risk management is identi...
Today, organizations are managing corporate objectives and strategic plans manually in documents or spreadsheets – but those documents are not tied to the operational plans that businesses put in place to assure that their strategies are successful. ...
Archer Speak Up enables you to submit ideas to improve the business, report issues to the responsible organizations, document concerns regarding potential ethics violations, incidents, breaches, complaints or issues with employees or third parties, a...
For over two decades, Karta has provided Governance Risk and Compliance (GRC) or Integrated Risk Management (IRM) solutions to the utility industry. Karta is a strategic partner with AESI, an engineering and management consulting firm that provides t...
Regulated organizations are subject to frequent audit examinations by various government agencies. Interaction with regulatory bodies typically involves significant time investment since identifying, locating, and gathering required documentation and...
The term "due diligence" is associated with an orderly investigation of business matters and is often adapted to address several situations within organizations. Due diligence activities are often required during a merger and acquisition process. But...
ChristineTran
JordanBauman
SusanReadMiller
GloriaHigley
WesleyLoeffler
DanAbrahamson
CoreyCarpenter1
Chris_D
KanishakaJain
SueJessee
