This is GRC (Page 8)

16 Aug 2023 Security

Why the Media Should Stop Reporting on Security Breaches

Not every security breach is the same. These complex events are not always of public interest. Media coverage may use them to fuel your anger and anxieties, rather than inform you.

09 Aug 2023 Leadership

Common Security Analyst Mistakes to Avoid

Successful security analysts understand the context of an organization. They educate colleagues about security risks. They leverage the trust they've earned to guide and advise their colleagues. Here's what NOT to do to achieve success!

02 Aug 2023 GRC in Practice

How much does a security breach cost?

How much money does a security breach cost? Looking at the IBM cost of a data breach report, I explore how information security cannot solely be a question of avoiding breaches.

26 Jul 2023 Break In GRC Featured

Why "Just hire entry-level cybersecurity professionals and train them" isn't as easy as it seems

“They say there is a job shortage. But why won’t they hire people with no experience, and train them?” I hear you. But I’m here to tell you “training” someone is not easy. Worse, it’s not just a question of dollars: it’s a question of psychological balance for people like me. Let me explain.

19 Jul 2023 GRC in Practice

What is ISO27001 Certification?

Explaining what makes the ISO27001 standard relevant for information security professionals today. I tell the story of how I took part in an ISO27001 certification process. I share my expert opinion on how this framework can help an organization manage security in a cost-effective way.