Risk Management

The NIS2 Directive is legislation adopted by the EU that increases regulatory expectations for cybersecurity across industries. This checklist helps you evaluate if your organization is NIS2 compliant.

Build and manage an efficient, centralized compliance program with the ability to expand to meet the needs of a growing organization.

Dieser Leitfaden erläutert, was Sie für die Einhaltung der NIS2-Richtlinie wissen müssen. Die NIS2-Richtlinie ist ein EU-Gesetz, das die Cybersecurity in der EU verbessern soll, indem es einen gemeinsamen Satz von Cybersecurity-Standards für alle Mitgliedstaaten schafft.

Learn how NAVEX IRM can help you stand up a departmental risk management practice and shine through in your organization.

NAVEX IRM, a GRC and integrated risk management solution, equips users and business leaders to manage risk from the endpoint to the enterprise.

RiskRate helps you execute on a best practice based third-party due diligence program and actively reduce your risks. Accessible anytime and anywhere, RiskRate is a purpose-built solution through which your third-party due diligence can be streamlined, centralized and expertly managed.

In part one of this cybersecurity blog series, we’ll uncover the staggering costs of failure, expose the limits of technology and reveal why your employees hold the key to safeguarding your business against cybercrime.

Risk assessments are one of the most important tasks a compliance officer performs – and also one of the most confounding. How do you keep assessing your organization’s risks in a disciplined, methodical manner, when the range and nature of those risks changes so often?

This eBook is your go-to resource for managing risks of all kinds, including regulatory compliance risk, third-party due diligence and risk mitigation, and internal risks.

Download our ready-to-use supply chain sample policy template today.

In today’s world, it is critical that your company knows who it is actually doing business with in order to better understand the level of risk each third party represents as a whole – not just knowing an outside entity’s name or officers, but the people who ultimately own, control and profit from it.

NAVEX’s Supply Chain Due Diligence Package is designed to address complex requirements across supply chains and support organizations’ efforts in complying with existing and emerging global supply chain regulations, including the German Supply Chain Act.

A risk-based program allows organizations to identify their own risks, their third-party risks, and apply additional due diligence when and where it’s applicable based on the level and nature of risk each third party represents.