Deadly and infectious viruses, such as Ebola, are an inevitable and unavoidable fact of nature. In other words, they are examples of a Hard Trend. Whether it is the current Ebola outbreak, or future outbreaks of infectious diseases that have to be cured, they demand new innovations in order to combat them. Continue reading
Negligence is conduct that falls below the standard of behaviour for the protection of others against unreasonable risk of harm. From a risk management perspective if one neglects to do something, and allows that something to happen, then risks have been ignored and there has been negligence. Continue reading
Everyone is very familiar with the Plan-Do-Check-Act cycle that is the basis of today’s Good Management Practice. So what is the difference between Good Management Practice and Best Practice?
ISO, the International Organization for Stadardization, has a comprehensive set of guidelines covering a broad range of good management practices, all of which include a component on Continuous Improvement. Continue reading
I wrote the following article to help clarify CyberSecurity Threats and vulnerabilities, so that we can facilitate better risk assessment. This assessment of software vulnerabilities was based on data pulled from the Common Vulnerability and Exposure database. For added context below I included statistics from Q1 RedSocks Report on Malware. It’s apparent that the CVE only registers a small percentage of the overall vulnerabilities. This report supports the need for ongoing vulnerability management, however there is an equally important emphasis on regular security testing and integration with product development and change management. Continue reading
How do you start your ISO 9001:2015 risk management journey?
You can use ISO 31000 framework as your guide. ISO 9001:2015 is a new ISO 9001 standard. However, organizations have been initiating Enterprise Risk Management programs for almost 10 years, largely in the financial and IT areas of the organization. Continue reading