One of the key issues facing many organisations revolves around what a risk management framework looks like. ISO 31000 highlights the elements of a risk management framework as shown below: Continue reading
Deadly and infectious viruses, such as Ebola, are an inevitable and unavoidable fact of nature. In other words, they are examples of a Hard Trend. Whether it is the current Ebola outbreak, or future outbreaks of infectious diseases that have to be cured, they demand new innovations in order to combat them. Continue reading
Negligence is conduct that falls below the standard of behaviour for the protection of others against unreasonable risk of harm. From a risk management perspective if one neglects to do something, and allows that something to happen, then risks have been ignored and there has been negligence. Continue reading
Everyone is very familiar with the Plan-Do-Check-Act cycle that is the basis of today’s Good Management Practice. So what is the difference between Good Management Practice and Best Practice?
ISO, the International Organization for Stadardization, has a comprehensive set of guidelines covering a broad range of good management practices, all of which include a component on Continuous Improvement. Continue reading
I wrote the following article to help clarify CyberSecurity Threats and vulnerabilities, so that we can facilitate better risk assessment. This assessment of software vulnerabilities was based on data pulled from the Common Vulnerability and Exposure database. For added context below I included statistics from Q1 RedSocks Report on Malware. It’s apparent that the CVE only registers a small percentage of the overall vulnerabilities. This report supports the need for ongoing vulnerability management, however there is an equally important emphasis on regular security testing and integration with product development and change management. Continue reading