GRC resources for IT, Cyber Security & Audit professionals
If you have been following this website for a while, you might have noticed that a newsletter has been quietly running in the background. Ten issues in, I realized I never actually sat down and wrote a proper post about it. So here we are.
I recently made an AI bot at my company that does an initial risk assessment when you give it a potential risk scenario. We have an internal AI agent developer
Curated list of resources for people in GRC
A demo tool to show how to practically use the CIA triad to rate an asset.
If you do Security Risk assessments of a qualitative nature in your organization, you could use this template for detailed risk documentation. It has pages for describing the risk, evaluating
The legendary Ron Ross gives some guidance.
Four criteria that can be used to classify something to be "legacy"
Two useful resources for people working on ISO 27001 - a Gap Assessment and a Maturity Assessment template
List of websites where you can find information about security breaches
Benchmarks of other companies and industries are very useful to GRC professionals. It is a good indicator to see how leaders, competitors, and the industry overall are positioned in terms