Self Improvement Site
On The Internet! Take the Self Improvement Tour
Join
LoginHelp
Find an Expert
Become an Expert

Submit an Article

Risk Management Articles

Submit an Article
Other Topic Resources
We are currently looking for an Official SelfGrowth.com Guide to "Risk Management". If you have expertise in Risk Management and your own website and/or product for this topic, please review this form for complete details. The Official Guide Position is part of our Premium Placement Package
Most RecentHighest RatedMost Viewed
  • NIST Issues Revised Guidance for Bolstering Federal Email Security - by Michael Peters
    Submitted on Mar 13, 2019 from Michael Peters
    Email breaches can be just as destructive to organizations as customer data breaches; just ask Sony Pictures and the Democratic National Committee. A breach of a federal government agency’s email system may not just be embarrassing or scandalous to the agency; it could put national security at ...
    Views: 37
    0
    Your rating: None
  • Proactive Tips for Preventing Credential Stuffing Attacks - by Michael Peters
    Submitted on Mar 12, 2019 from Michael Peters
    Nearly everyone knows that reusing passwords across multiple sites and systems is a security risk, but most people continue to do it anyway. As a result, credential stuffing attacks abound, especially among retailers. Dunkin’ Donuts has been victimized twice in the past three months by hackers ...
    Views: 37
    0
    Your rating: None
  • Hybrid Cloud Security Lags Behind Implementation - by Michael Peters
    Submitted on Mar 01, 2019 from Michael Peters
    For many organizations, particularly those in highly regulated industries such as healthcare, hybrid cloud environments offer the best of both worlds. Companies get to enjoy the easy scalability and other benefits of AWS, Microsoft Azure, or Google Cloud while isolating their critical workloads ...
    Views: 49
    0
    Your rating: None
  • Malorie Peacock – Storytelling in the Courtroom - by Michael Cowen
    Submitted on Mar 01, 2019 from Michael Cowen
    In this episode of Trial Lawyer Nation, Michael Cowen sits down with Cowen | Rodriguez | Peacock partner, Malorie Peacock, for another installment of TLN Table Talk to answer the questions of our listeners. Today’s topic focuses on storytelling in trial and identifying the “characters” in your ...
    Views: 51
    0
    Your rating: None
  • Does Your Business Need a Website Maintenance Plan? - by Susan Friesen
    Submitted on Feb 28, 2019 from Susan Friesen
    Does Your Business Need a Website Maintenance Plan? What Can Happen if You Neglect Your Newly-Built Site So, your new site is complete – congratulations! There are a lot of moving parts to a build, from coding to design to content. However, if you want to attract and retain customers, ...
    Views: 60
    0
    Your rating: None
  • Safe Storing Tips For Dangerous Materials - by Ron Wolf
    Submitted on Feb 22, 2019 from Ronald Wolf
    Preventing a scenario in which hazardous materials put at risk people, animals, vegetation and environment, should always be a number one priority. Even if we are talking about chemicals or materials that are just sitting there for ages in some dark corner, without causing any real damage, they ...
    Views: 47
    0
    Your rating: None
  • GandCrab Ransomware Exploiting an Old Vulnerability to Infect New Victims - by Michael Peters
    Submitted on Feb 21, 2019 from Michael Peters
    Third-party vendor hacks, where hackers attack a company by compromising one of their business associates, have been a problem for a while. Now, the hackers behind GandCrab ransomware have gotten into the act, exploiting a year-old SQL injection vulnerability in a common remote IT support ...
    Views: 49
    0
    Your rating: None
  • The Cost of One Cyber Attack Can Cripple an SMB - by Michael Peters
    Submitted on Feb 13, 2019 from Michael Peters
    Cost is arguably the biggest impediment to robust, proactive cyber security at small and medium sized businesses (SMBs). SMBs are aware of the need to secure their systems and data, but when presented with a solution, the costs may give them pause. Some of them think that hackers are interested ...
    Views: 57
    0
    Your rating: None
  • What Is Ransomware-as-a-Service? Understanding RaaS - by Michael Peters
    Submitted on Feb 07, 2019 from Michael Peters
    Ransomware isn’t a new threat. It first rose to prominence back in 2016, when Hollywood Presbyterian Medical Center shelled out $17,000 in bitcoin after an attack took the hospital offline. Since then, ransomware has only become more popular, especially for hackers targeting the healthcare ...
    Views: 59
    0
    Your rating: None
  • It's a Mature Bull Market And Time For A Strategic Hedging Plan - by Dwayne Strocen
    Submitted on Feb 06, 2019 from Dwayne Strocen
    Yes it’s time to hedge your risk, but don’t wait for that perfect moment. Both the economy and stock market are showing signs of stress. Here's what you need to know. Here are some of the excuses we hear from professional money managers and risk managers for not having a hedging program ...
    Views: 42
    0
    Your rating: None
  • Browser Extensions Can Pose Significant Cyber Security Threats - by Michael Peters
    Submitted on Jan 30, 2019 from Michael Peters
    From blocking ads and coin miners to saving news stories for later reading, browser extensions allow users to customize their web browsers for convenience, efficiency, and even privacy and security — usually for free. However, browser extensions need a wealth of access permissions to operate, ...
    Views: 56
    0
    Your rating: None
  • What Your Cloud Business Needs to Know About SOC 2 Certification - by Michael Peters
    Submitted on Jan 25, 2019 from Michael Peters
    As cyber threats present greater risks to enterprises of all sizes and in all industries, more are requiring that their SaaS providers and other cloud services vendors have an SOC 2 certification. Let’s examine what an SOC 2 certification is and why your cloud services business should get ...
    Views: 69
    0
    Your rating: None
  • The Top 5 Cyber Threats to the Healthcare Industry - by Michael Peters
    Submitted on Jan 18, 2019 from Michael Peters
    The financial impact of cyber attacks can be devastating, especially to small organizations. The HHS points out that the healthcare industry has the highest data breach cost of any industry, at an average of $408 per record and $2.2 million per organization. In 2016, the healthcare industry as a ...
    Views: 251
    0
    Your rating: None
  • Finding the Right Home Security System for Your Home - by Mohimenul Islam
    Submitted on Jan 18, 2019 from Mohimenul Islam
    Owning a home comes with a ton of responsibilities, and topping this list is ensuring that it is well protected. After all, it is among your most significant investments. While there are many ways to safeguard your home such as having a dog or joining a neighborhood watch group, a home security ...
    Views: 86
    0
    Your rating: None
  • HHS Publishes New Cyber Security Guidelines for Healthcare Industry - by Michael Peters
    Submitted on Jan 09, 2019 from Michael Peters
    Noting that cyber security is “the responsibility of every health care professional, from data entry specialists to physicians to board members,” the U.S. Department of Health and Human Services (HHS) has published Health Industry Cybersecurity Practices: Managing Threats and Protecting Patients ...
    Views: 118
    0
    Your rating: None
  • The 6 Most Common Cyber Security Mistakes Your Employees Are Making - by Michael Peters
    Submitted on Jan 02, 2019 from Michael Peters
    With an estimated 90% of cyber attacks caused by human error or behavior, it’s important to understand the most common cyber security mistakes your employees are probably making and know how to mitigate them. Becoming victims of phishing schemes Stolen login credentials are the most common ...
    Views: 113
    0
    Your rating: None
  • Why your cloud business needs FedRAMP certification - by Michael Peters
    Submitted on Dec 27, 2018 from Michael Peters
    The Federal Risk and Authorization Management Program, or FedRAMP, was designed to support the federal government’s “cloud-first” initiative by making it easier for federal agencies to contract with vendors that provide SaaS solutions and other cloud services. Unlike FISMA, which requires ...
    Views: 114
    0
    Your rating: None
  • Chinese Hackers Pose a Serious Threat to Military Contractors - by Michael Peters
    Submitted on Dec 21, 2018 from Michael Peters
    The years-long Marriott Starwood database breach was almost certainly the work of nation-state hackers sponsored by China, likely as part of a larger campaign by Chinese hackers to breach health insurers and government security clearance files, The New York Times reports. Why would foreign spies ...
    Views: 144
    0
    Your rating: None
  • Marriott Starwood Breach Spotlights Multiple Cyber Security Issues - by Michael Peters
    Submitted on Dec 12, 2018 from Michael Peters
    The Marriott Starwood breach, which exposed the personal data of 500 million guests, was not the largest data breach in terms of size; Yahoo still holds that dubious honor. However, because of the nature of the data stolen, it has the potential for a very long reach and highlights multiple cyber ...
    Views: 157
    0
    Your rating: None
  • Common Cyber Security Myths That Hackers Want You to Keep Believing - by Michael Peters
    Submitted on Dec 07, 2018 from Michael Peters
    Like other criminals, hackers take advantage of people’s misconceptions regarding their risk of being victimized. Here are six common cyber security myths that could be putting your enterprise at risk. Security Myth #1: Compliance Equals Cyber Security Compliance with regulatory and ...
    Views: 206
    0
    Your rating: None
  • Understanding & Preventing Advanced Persistent Threats (APTs) - by Michael Peters
    Submitted on Nov 29, 2018 from Michael Peters
    A guide to advanced persistent threats (APTs), a highly sophisticated, highly destructive form of cyber attack. What is an Advanced Persistent Threat (APT)? “Advanced persistent threat” is a broad term used to describe a cyber attack where hackers covertly gain access to a system and ...
    Views: 164
    0
    Your rating: None
  • Best Practices for Complying with Data Privacy Laws - by Michael Peters
    Submitted on Nov 23, 2018 from Michael Peters
    As California goes, so does the rest of the country. While the California Consumer Privacy Act (CCPA), which was passed this summer and goes into effect in 2020, falls short of being an “American GDPR,” it clearly tore many pages from the far-reaching European data privacy law. Similar to the ...
    Views: 200
    0
    Your rating: None
  • The Top Cyber Security Threats Facing Enterprises in 2019 - by Michael Peters
    Submitted on Nov 14, 2018 from Michael Peters
    The cyber threat environment is becoming more dangerous every day. A recent survey by the World Economic Forum revealed that cyber-attacks were the number-one concern of executives in Europe and other advanced economies. As we approach the winter holidays and the end of the year, let’s ...
    Views: 326
    0
    Your rating: None
  • 5 Practical Applications of Blockchain to Cyber Security and Compliance - by Michael Peters
    Submitted on Nov 07, 2018 from Michael Peters
    While digital currencies, particularly bitcoin, are the most common and well-known application of blockchain technology, they are far from being the sole or even the most important use. Blockchain is one of the most important technological advancements of the digital age, and its full potential ...
    Views: 319
    0
    Your rating: None
  • SEC Cyber Enforcement Action Cites Lack of Internal Controls - by Michael Peters
    Submitted on Oct 31, 2018 from Michael Peters
    Des Moines-based Voya Financial Advisors (VFA) has agreed to pay the U.S. Securities and Exchange Commission a $1 million penalty in the wake of an April 2016 breach that affected several thousand VFA customers. The SEC cyber enforcement action charged VFA with not having sufficient written ...
    Views: 221
    0
    Your rating: None
  • 10 Cyber Security Travel Tips to Protect Your Devices & Data - by Michael Peters
    Submitted on Oct 31, 2018 from Michael Peters
    The holiday season is fast approaching, but hackers don’t take vacations. Whether you’re planning to go home for the holidays or travel for business on a regular basis, make sure to protect yourself from cyber crime with these cyber security travel tips. Update Your OS & Software Before ...
    Views: 245
    0
    Your rating: None
  • Tips for Combating Shadow IT Usage in the Enterprise - by Michael Peters
    Submitted on Oct 18, 2018 from Michael Peters
    Shadow IT is a very serious and growing threat to IT compliance and cyber security, and most organizations have no idea how common it really is. This article will examine some of the risks of shadow IT and discuss ways in which organizations can curb it. What Is Shadow IT? Shadow IT refers ...
    Views: 163
    0
    Your rating: None
  • NIST 800–171 Compliance: A Guide for Government Contractors - by Michael Peters
    Submitted on Oct 14, 2018 from Michael Peters
    If your company is part of the federal supply chain, you likely need to comply with NIST 800–171. NIST 800–171 compliance applies to contractors for the DoD, GSA, NASA, and other federal and state agencies; universities and research institutions that accept federal grants; consulting firms with ...
    Views: 176
    0
    Your rating: None
  • NIST Privacy Framework Under Development to Complement NIST CSF - by Michael Peters
    Submitted on Oct 05, 2018 from Michael Peters
    Citing the success of its cybersecurity framework and the advent of IoT devices, artificial intelligence, and other technologies that are making it more challenging than ever for enterprises to protect their customers’ privacy, NIST has launched a collaborative project to develop a voluntary ...
    Views: 199
    0
    Your rating: None
  • Best Practices for Achieving PCI DSS Compliance - by Michael Peters
    Submitted on Sep 27, 2018 from Michael Peters
    PCI DSS compliance is mandatory for any organization that accepts or processes payment cards, yet shockingly, a recent study by SecurityScorecard found that over 90% of U.S. retailers fail to meet four or more PCI DSS requirements. Compliance with PCI DSS is not something to be taken lightly. ...
    Views: 250
    0
    Your rating: None
  • Penetration Tests vs. Vulnerability Scans: Understanding the Differences - by Michael Peters
    Submitted on Sep 19, 2018 from Michael Peters
    The difference between penetration tests and vulnerability scans is a common source of confusion. While both are important tools for cyber risk analysis and are mandated under PCI DSS, HIPAA, and other security standards and frameworks, they are quite different. Let’s examine the similarities ...
    Views: 234
    0
    Your rating: None
  • Cloud Security: Understanding SOC 2 Type 2 Attestations - by Michael Peters
    Submitted on Sep 18, 2018 from Michael Peters
    We are living in a cloud-first world; cloud services, including storage services and SaaS providers, are wildly popular. Unfortunately, third-party vendor breaches are at epidemic levels, and new regulations such as the EU GDPR are seeking to hold organizations accountable if third-party ...
    Views: 196
    0
    Your rating: None
  • SANCTUM WEALTH MANAGEMENT: THE COST OF RISK AVERSION - by Garry Dugan
    Submitted on Sep 10, 2018 from Sanctum Wealth
    Investment Outlook , Published Jan 18, 2018 Contact The opportunity cost of choosing risk aversion – investing in FDs for instance – has been high over the past two decades. Staying invested is clearly the right choice. Time and again investors have chosen risk aversion, and the opportunity ...
    Views: 232
    0
    Your rating: None
  • NIST Issues Guidance for Medical IoT Device Security - by Michael Peters
    Submitted on Sep 05, 2018 from Michael Peters
    There are more connected devices than there are humans on Earth. Organizations have been as quick to embrace the Internet of Things as consumers have, and the healthcare industry is no exception. Medical IoT devices have exploded in popularity and grown in complexity. Smart medical devices allow ...
    Views: 229
    0
    Your rating: None
  • Social Media Cyber Security Risks and Best Practices for Businesses - by Michael Peters
    Submitted on Aug 29, 2018 from Michael Peters
    Businesses tend to gloss over social media cyber security, thinking that it’s more of an issue in their employees’ personal lives than a threat to workplace cyber security. However, one in eight enterprises have suffered a security breach that was traced back to a cyber attack on social ...
    Views: 236
    0
    Your rating: None
  • The WPA3 WiFi Security Standard: What Your Enterprise Needs to Know - by Michael Peters
    Submitted on Aug 21, 2018 from Michael Peters
    According to the Wi-Fi Alliance, there are now more IoT devices than there are humans on Earth, and over 50% of internet traffic travels through wireless networks. As people’s dependence on connected devices has grown, free public WiFi has become insanely popular, but it’s also insanely ...
    Views: 217
    0
    Your rating: None
  • Cyber Security Best Practices When Using Public WiFi Networks - by Michael Peters
    Submitted on Aug 17, 2018 from Michael Peters
    Once a luxury item, free public WiFi has morphed into a standard service that consumers expect when patronizing everything from restaurants and retail stores to airports and hotels. Free WiFi users aren’t just checking Facebook or posting vacation photos to Instagram, either; all of us have sat ...
    Views: 259
    0
    Your rating: None
  • Understanding the NIST Cybersecurity Framework (NIST CSF) - by Michael Peters
    Submitted on Aug 08, 2018 from Michael Peters
    Last week, the NIST Small Business Cybersecurity Act (S. 770) passed the U.S. Senate and was sent to the White House, where the president is expected to sign it into law shortly. The bipartisan measure directs NIST to provide resources to small businesses to help them implement the NIST ...
    Views: 239
    0
    Your rating: None
  • What Is Multi-Factor Authentication, and Why Is It So Important? - by Michael Peters
    Submitted on Aug 02, 2018 from Michael Peters
    Organizations can no longer depend on passwords alone to protect their systems and data, especially since 25% of employees admit to using the same password for all of their accounts, at home and at work, and stolen account credentials are hackers’ preferred way to break into enterprise systems. ...
    Views: 250
    0
    Your rating: None
  • Top Cyber Threats Organizations Are Facing Right Now - by Michael Peters
    Submitted on Jul 26, 2018 from Michael Peters
    Cyber security is a continuous game of Spy vs. Spy. Every time a new technology is introduced, the potential attack surface expands. The moment one vulnerability is patched, hackers find another way in. Keeping up can feel overwhelming, even for security professionals. In no particular order, ...
    Views: 292
    0
    Your rating: None
  • Business Email Compromise Losses Top $12 Billion Globally, Says FBI - by Michael Peters
    Submitted on Jul 20, 2018 from Michael Peters
    Global losses from business email compromise scams, a highly sophisticated form of phishing, grew by 136% between December 2016 and May 2018 and now exceed $12 billion, according to a public service announcement released by the FBI. What Is a Business Email Compromise Scam? A business ...
    Views: 325
    0
    Your rating: None
  • Is the California Consumer Privacy Act the “American GDPR”? - by Michael Peters
    Submitted on Jul 12, 2018 from Michael Peters
    The recent Exactis data leak, which could surpass Equifax in the sheer number and scope of records exposed, has data privacy advocates calling for an “American GDPR.” While it is unlikely that a federal data privacy law will come to pass anytime soon, some states have already taken matters into ...
    Views: 346
    0
    Your rating: None
  • IoT and Security Challenges in Mobile App Development - by Karl Parker
    Submitted on Jul 12, 2018 from Swapnil Kothawade
    People expect apps to work not just on their smartphones, but on every smart device they own. The invasion of wearable technology has made it apparent that smart thermostats and smart bulbs can tap into an enormous market. Therefore, the Internet of Things (IoT) is poised to have a highly ...
    Views: 303
    0
    Your rating: None
  • 4 Tips which can Secure Your Facebook Account from Hackers - by Malik
    Submitted on Jul 07, 2018 from Usama Malik
    Facebook is the most widely used social media network. There are almost 2 billion monthly active users of Facebook according to stats. If you talk with 100 people around you, you will find that almost 92 people are using Facebook. Many celebrities and brands have their pages and accounts on ...
    Views: 356
    5
    Your rating: None Average: 5 (1 vote)
  • Nearly 340 Million Records Exposed in Exactis Data Leak - by Michael Peters
    Submitted on Jul 05, 2018 from Michael Peters
    Last week’s data leak at Exactis, a Florida-based marketing and data aggregation firm, has cyber security experts and data privacy advocates up in arms. WIRED reports: Earlier this month, security researcher Vinny Troia discovered that Exactis, a data broker based in Palm Coast, Florida, had ...
    Views: 446
    0
    Your rating: None
  • Understanding the DMARC Email Security Protocol - by Michael Peters
    Submitted on Jul 01, 2018 from Michael Peters
    U.S. federal government agencies are required to use the email security protocol DMARC to prevent email spoofing, but the overwhelming majority of federal contractors either don’t have it installed or don’t have it set up properly. NextGov reports: Among the top 98 government contractors by ...
    Views: 322
    0
    Your rating: None
  • How can Premium Consulting Take Your Management to Another Level? - by Compliancehelp Consulting, LLC
    Submitted on Jun 27, 2018 from David Colleenwood
    Premium consultancy industry is rapidly expanding. The growing demand for this service is the main reason behind this expansion and popularity. This kind of services drives the company behavior and encourages the agendas and funds. However, to reap optimal benefits, both the clients and the ...
    Views: 306
    0
    Your rating: None
  • Asbestos Risk Assessment and Control Measures - by Chris Haris
    Submitted on Jun 26, 2018 from olive learning
    Asbestos is a mineral whose main characteristics are thermal isolation and highly resistant to fire. Asbestos toxicity is related to its fibrous structure, Which is globally tested and recognised as a first level Human carcinogen, found naturally in rocks and widely used by modern industry. ...
    Views: 364
    4
    Your rating: None Average: 4 (1 vote)
  • 4 Advantages of Hiring a Reliable Security Patrol Service - by Ron Spencer
    Submitted on Jun 22, 2018 from Ron Spencer
    No matter where a person is, the first and foremost thing that comes to mind is the security. Many house owners and the business corporate hire security guards to take care of their property. The professionals in this have a lot of responsibility and need to be attentive and strict on all ...
    Views: 417
    0
    Your rating: None
  • Tesla Breach Demonstrates the Importance of Industrial Cyber Security - by Michael Peters
    Submitted on Jun 20, 2018 from Michael Peters
    Massive data breaches are what grab headlines, but industrial cyber security attacks can be devastating in the real world. Tesla has just learned this lesson the hard way. CEO Elon Musk has accused a malicious company insider of altering product code, stealing data and exporting it to third ...
    Views: 335
    0
    Your rating: None
© 1996-2019 SelfGrowth.com. All rights reserved.