An open letter to Wawa, Inc., from French Caldwell with contributions from Richard Stiennon. Dear Wawa, Inc., Other than being a regular customer, I hardly know you. But good job on the crisis response. Thanks. I’m sure you’ll figure out what went wrong that led to the breach of customer credit card data and what…
The concentration risks of public cloud services infrastructure will become a public policy issue, leading to increased regulatory oversight of large cloud services providers.
A Frugalnomics Redux Over the next five years, global economic stagnation will force IT organizations to completely show, communicate, and defend their IT spend. Sixty percent of enterprises will fail to accomplish this, leading to a continuing collapse of centralized IT stewardship.
Do you wonder why websites now give you the option to accept, decline or even read their privacy polices? The answer is the European Union’s General Data Protection Regulation (EU GDPR.) This Regulation expands the rights of EU citizens regarding their personally identifiable information (PII), forever changing how PII is used and stored by…
President Obama issued Executive Order (E.O.) C.F.R. 13691 to promote private sector cybersecurity information sharing. See Executive Order No. 13691 For over 1 million faith-based and nonprofit organizations exist in the Unite States alone. See NonprofitDirectory In 2018 Faith-based Information Sharing and Analysis Organizations, ISAO emerged to help these organizations improve their cyber security posture.…
On 27 and 28 March 2019, at PwC’s Risk Summit in Boston, PwC senior leaders and consultants in the risk assurance and consulting practices shared with their clients and over three dozen industry analysts their vision of how digital technologies are transforming both risk management and business performance.
Details of the deal have not been announced but the transaction is expected to complete in the first half of 2019.
he announcement from PG&E that the California utility will file for bankruptcy reminded me of a question posed a few years ago by the head of GM’s risk committee: “How do we manage strategic risks?”
Key takeaway Third party risk management is not just for suppliers, IT vendors and service providers. In many cases, subsidiaries or other organizations within your enterprise, and even well-known business customers should be brought into the third party management program. The problems at Deutsche Bank and Danske Bank reminded me of an inquiry I had…
