Data Privacy & Cybersecurity

With cyber-attacks on the rise and frequently making headlines, organizations must be diligent in their efforts to protect the enterprise from growing threats. The U.S. Securities and Exchange Commission has proposed new rules for the disclosure of cybersecurity issues – setting in motion a future of increasingly regulated cybersecurity programs and communication about incidents.

Recent incidents of cyberattacks impacting major organizations through exploited weaknesses in third-party vendors have highlighted the importance of effective third-party risk management, creating an opportunity to revisit how risk-based vetting and continuous monitoring are pillars of a successful program. In this article, we’ll discuss the current third-party vendor landscape and related risk management practices.

The recent passage of the Strengthening American Cybersecurity Act of 2022 in the Senate indicates growing attention to cybersecurity threats to critical infrastructure. Escalating events related to the Russian invasion of Ukraine and increased cybersecurity attacks make the call for increased security and regulated reporting requirements timely. In this article, we discuss what the passage means and the considerations all businesses (regardless of industry) should make.

Each year, NAVEX publishes the Top 10 Trends in Risk and Compliance. This publication features trends and predictions for the year to come and features contributions from experts in the industry. In this excerpt, Pam Hrubey and Jessica Wilburn outline privacy and data protection issues organizations must consider.

Each year, NAVEX publishes the Top 10 Trends in Risk and Compliance. This publication features trends and predictions for the year to come and features contributions from experts in the industry. In this article, Matt Kelly outlines how risk and compliance management is evolving in the “new normal” workplace.

Businesses need to do better at reducing the threat of cyberattacks - which means compliance and risk officers need to understand what ransomware truly is. Here are practical steps your organization can take to identify and neutralize cyber threats.

Discussing third-party risk can be akin to opening Pandora’s box. In their 2021 NAVEX Next Webinar, Linda Tuck Chapman and Matt Kelly explore what organizations can do to protect themselves from third-party failures.

With its recent proposals, OMB has started to define what a post perimeter-based security world will look like. The move to zero-trust architecture will impact every business function – including risk and compliance management. Here’s what you can do to prepare.

The concept of privacy by design has evolved far beyond its engineering origins. Learn how a people-focused and technology-enabled approach to data privacy is critical to protecting your organization’s revenue, risk and reputation.

Boards and senior management agree that they must move beyond a compliance-centric approach to cybersecurity. But what role should compliance play? Here are some key steps compliance can take to break down silos and develop “hardened” business operations.

NAVEX Global’s recent survey of IT security professionals found that alliances are growing between IT security and IRM. Organizations are moving away from a siloed approach, and adopting an integrated risk management (IRM) strategy.

An executive order was signed on May 12, directing the federal government to overhaul its approach to cybersecurity. Corporate compliance and risk management professionals should consider this order carefully.

Cybersecurity threats are constantly evolving, and so is cybersecurity compliance. Learn what the arrival of CMMC means for your business and what you can do now to prepare.