Applying the ISO 27005 risk management standard


ISO 27005, issued in 2008, filled a noticeable gap in the ISO 27000 series of standards. The standard is officially titled ISO/IEC 27005.2008, “Information technology — Security techniques — Information security risk management.”

Read the rest of this entry »

New ISO 31000 risk management standard receives good early reviews


Two months after its debut, reviewers pretty much agree that ISO 31000 lives up to its billing as a good generic, process-oriented risk management framework that addresses myriad forms of risk across many industries. The question is, do you need it?

Read the rest of this entry »

Elevated Political Risk Levels to Continue into 2010, says Aon


Political and financial instability remain a feature of the business landscape as a result of the recession, according to Aon Risk Services, the global risk management and insurance brokerage business of Aon Corporation. The company has launched its 17th annual Political Risk Map.

Read the rest of this entry »

Survey: Supply Chain Risk Management


Aravo, a provider of SaaS Supplier Information Management (SIM) software and services, announced the results of a supplier risk poll exploring the opinions and concerns of Fortune 1000 executives.

Read the rest of this entry »

The Top Cyber Security Risks


Two risks dwarf all others, but organizations fail to mitigate them. Read the rest of this entry »

Boardrooms need a simple, transparent method of risk oversight


On the anniversary of the collapse of Lehman Brothers, the Business Continuity Institute has published a discussion paper on how risk oversight and transparency can be improved for non-executive directors and shareholders through applying business continuity management practices.

Read the rest of this entry »

Four risk management mistakes that could threaten the enterprise security budget


Enterprise security budgets have always been difficult to justify, and the global economic crisis is making this critical process even more difficult, according to Gartner, Inc. Corporate security professionals face a complex situation as they work with highly constrained financial and staffing resources to manage and mitigate a rapidly changing and expanding risk environment.

Read the rest of this entry »

Survey Shows Corporations’ Emphasis on Risk Management Initiatives, Expressed Need for Clarity Among Stakeholders


Ninety percent of risk management experts surveyed have implemented or plan to implement an enterprise-wide risk management approach, according to a new survey from the Society of Actuaries (SOA) and its partners. As corporations work to gain a foothold following the global financial crisis, businesses are taking a closer look at risk management implementation and the role of the Chief Risk Officer (CRO), as noted in the survey. Other top factors in the decision to implement ERM are ratings agencies and risk events affecting the firm.

Read the rest of this entry »

IRM announces Business Continuity and Crisis Management Student Award


The Institute of Risk Management (IRM) has announced that Claire Betteridge has won its 2009 Business Continuity and Crisis Management Student Award. Claire is Senior Risk and Insurance Officer for Blackpool Borough Council.

Read the rest of this entry »

Survey: Majority Of European Offices Not Protecting Confidential Printed Data


According to Samsung’s research, 56 percent of workers regularly see confidential documents abandoned on the printer, 51 percent not aware of any processes or technologies in place at their organization to protect the printer network itself

Read the rest of this entry »

Disaster Recovery: Anticipating Death


Congratulations — you’ve been assigned to implement your firm’s disaster recovery plan. Data backed up offsite? Check. Distributed data center? Check. Recovery procedures tested? Check. What’s missing? People.

Read the rest of this entry »