Email Alerts
-
How to manage security risks in vendor contracts
Financial institutions face numerous regulatory requirements for managing vendor risk. Learn what financial firms need to include in their vendor contracts in order to conform with regulatory guidance and industry best practices for vendor risk manag... Learning Guide
-
Financial Information Security Decisions 2008: Presentation downloads
Download a number of the fascinating presentations from the 2008 Financial Information Security Decisions conference. Conference supplement
-
Standardization key to Credit Suisse information security governance framework
The CISO of financial giant Credit Suisse says the key to successful global security and risk management is a uniform governance system supported by a common policy framework. Article | 17 Sep 2010
-
Controls monitoring helps with governance, risk and compliance
Gartner says continuous controls monitoring for transactions is a GRC technology that promises to reduce compliance costs and improve financial governance. Article | 21 May 2009
-
An advancement in GRC
David Schneier says he found a product that takes governance, risk, and compliance (GRC) to a new level. News | 14 May 2009
-
Advocacy group looks to foster trust in foreign service providers
A formal agreement with two Indian technology organizations expands the reach of the BITS program, with the goal of fostering trust in the security controls of international service providers. Article | 23 Apr 2009
-
Metrics don't truly quantify information risk
Mike Rothman explains his point of view on why metrics programs need to evolve from trying to truly quantify information risk to something that actually works. Column | 16 Sep 2008
-
Guidelines for conducting a risk assessment
In this Q&A, security pro Mike Rothman offers advice on the best risk assessment procedures, and discusses whether or not ISO 17799 should be involved in the process. Interview | 10 Jan 2008
-
Creating a fraud risk assessment policy
In this Ask the Expert Q&A, our security management expert provides our member with a series of fraud risk assessment factors to address before a policy is created. Interview | 09 Jan 2008
-
Vendor risk management: process and documentation
As part of the vendor risk management process, regulators expect information security officers will document vendor relationships and have proper vendor documentation. Tip
-
Using an information security council
Getting cross-discipline cooperation for company-wide, security related policies is a challenge many financial firms face. Expert Eric Holmquist suggests creating an information security council to overcome this problem. In this tip, learn what attri... Tip
-
Information security governance using a risk-based approach
In this presentation from Financial Information Security Decisions, Eric Holmquist explores the key elements of sound information security governance and how to successfully manage and coordinate all of the complex and important elements Tip
-
Strategic metrics for information security at financial services firms
Risk and information security can be tough to measure, however information security metrics can help. Expert Pete Lindstrom shares his picks for the top 10 strategic information security metrics. Tip
-
Rethinking risk management for financial services firms
Recent events have forced financial firms to change they way they think of risk. Expert Rick Lawhorn explains the reasoning for the shift and how your organization can protect itself through the evolution of its risk management paradigm. Tip
-
Outlining governance frameworks
Every financial services firm must have a governance framework in place. The good news is there are a number of options when picking a one. This tip will outline the frameworks available and what every financial firm should consider when making the c... Tip
-
Five steps to building information risk management frameworks
Implementing a successful enterprise risk management plan can be an overwhelming and harrowing process. In order to make the process work, many aspects need to examined, and all business areas need to be hands on. In this tip, contributor Khalid Kark... Tip
-
How to make management accountable for risk
Learn how a simple document can hold management accountable for risk and encourage them to comply with security policies. Tip
-
international financial reporting standards (IFRS)
International financial reporting standards (IFRS) are specific organizational and monetary standards and frameworks for financial reporting that have been adopted in 113 countries including India, Australia and the European Union. Definition
-
Generally Accepted Recordkeeping Principles (GARP)
Generally Accepted Recordkeeping Principles (GARP) is a framework for managing records in a way that supports an organization's immediate and future regulatory, legal, risk mitigation, environmental and operational requirements. Definition
-
Red Flags Rule (RFR)
The Red Flags Rule (RFR) is a set of United States federal regulations that require certain businesses and organizations to develop and implement documented plans to protect consumers from identity theft. Definition
-
Vendor management process for financial services
In this video get tips from expert Eric Holmquist on how to handle vendors to optimize security and minimize risk. Topics include risk assessment, due diligence best practices, common mistakes financial firms make in their vendor management programs,... Video
-
Security on the street with SearchFinancialSecurity.com: Risk management
Societe Generale, Black Monday and bank failures are just a few of the reasons that the financial industry is in turmoil. Editor Sarah Hurley recently spoke with Chris McClean, an analyst at Forrester Research, to discuss the state of risk management... Podcast
-
international financial reporting standards (IFRS)
International financial reporting standards (IFRS) are specific organizational and monetary standards and frameworks for financial reporting that have been adopted in 113 countries including India, Australia and the European Union. Definition
-
Generally Accepted Recordkeeping Principles (GARP)
Generally Accepted Recordkeeping Principles (GARP) is a framework for managing records in a way that supports an organization's immediate and future regulatory, legal, risk mitigation, environmental and operational requirements. Definition
-
Standardization key to Credit Suisse information security governance framework
The CISO of financial giant Credit Suisse says the key to successful global security and risk management is a uniform governance system supported by a common policy framework. Article
-
Vendor management process for financial services
In this video get tips from expert Eric Holmquist on how to handle vendors to optimize security and minimize risk. Topics include risk assessment, due diligence best practices, common mistakes financial firms make in their vendor management programs,... Video
-
Red Flags Rule (RFR)
The Red Flags Rule (RFR) is a set of United States federal regulations that require certain businesses and organizations to develop and implement documented plans to protect consumers from identity theft. Definition
-
How to manage security risks in vendor contracts
Financial institutions face numerous regulatory requirements for managing vendor risk. Learn what financial firms need to include in their vendor contracts in order to conform with regulatory guidance and industry best practices for vendor risk manag... Learning Guide
-
Vendor risk management: process and documentation
As part of the vendor risk management process, regulators expect information security officers will document vendor relationships and have proper vendor documentation. Tip
-
Controls monitoring helps with governance, risk and compliance
Gartner says continuous controls monitoring for transactions is a GRC technology that promises to reduce compliance costs and improve financial governance. Article
-
An advancement in GRC
David Schneier says he found a product that takes governance, risk, and compliance (GRC) to a new level. News
-
Advocacy group looks to foster trust in foreign service providers
A formal agreement with two Indian technology organizations expands the reach of the BITS program, with the goal of fostering trust in the security controls of international service providers. Article
- See more All on Risk management frameworks, metrics and strategy
About Risk management frameworks, metrics and strategy
Risk management at financial institutions is a major priority, and a constant balancing act. Learn about risk management frameworks and metrics, and how to build a risk management strategy with proper requirements, responsibilities and controls.