Leveraging Issues Management as a Force Multiplier in Cybersecurity
summary
The talk explains how treating issues management as a central part of a GRC program can increase visibility and embed governance and accountability across cybersecurity. It describes using issues management processes to drive program improvements and to produce an organizational view of cybersecurity posture, with a focus on implementation within governance, risk, and compliance activities.
AI-written summary · about
chapters (15)
- 0:00Start
- 1:22Disclaimer
- 3:35Building GRC Ground Up
- 5:33Culture Challenge
- 6:12Culture Change - Vision
- 7:49Cyber GRC Operating Model
- 10:05Key Program Elements for Issues Management
- 11:56Policy/Standards
- 13:11Asset Management
- 14:03What We Did - Risk/Decision Processes
- 17:34Results - Analytics and Metrics
- 22:55So, what's changed?
- 26:10Collaboration
- 31:07Visibility
- 32:53Lessons Learned
related talks
40mProtecting What Matters Most – Tools for Managing Risk
40mCyber Risk Management Programs: Bringing Clarity to Cybersecurity
20mDecoded: Leverage Cybersecurity as a Business Enabler
41mThe Business of Cybersecurity
40mInformation Security Management Programs-Changing the Paradigm on Implementation and Management
15mTelling Hard Truths to Impact Change in Cybersecurity
36mThe New Why of Cybersecurity
27mSolving CISO Headaches: How to Align CTI and Risk Management