by Bob Chaput | Aug 26, 2024 | Blog Series - Overseeing the Development of Your ECRM Framework and Strategy, Board and CISO Interaction – Best Practices, Governance, Strategy, and Alignment
If you have ten thousand regulations, you destroy all respect for the law. —Winston Churchill Introduction Regulatory compliance has become a cornerstone of enterprise risk management in the ever-evolving cybersecurity landscape. Chapter 2 of my book, Enterprise Cyber...
by Bob Chaput | Jul 29, 2024 | Blog Series - Overseeing the Development of Your ECRM Framework and Strategy, Board and CISO Interaction – Best Practices, Governance, Strategy, and Alignment
Once you replace negative thoughts with positive ones, you’ll start having positive results.—Willie NelsonIntroductionIn an era where digital transformation drives business growth, cybersecurity must transcend its traditional role as a defensive measure. Chapter...
by Bob Chaput | Jul 15, 2024 | Blog Series - Overseeing the Development of Your ECRM Framework and Strategy, Board and CISO Interaction – Best Practices, Governance, Strategy, and Alignment
Corporate governance is concerned with holding the balance between economic and social goals and between individual and communal goals. The aim is to align as nearly as possible with the interests of individuals, corporations, and society. —Adrian Cadbury Introduction...
by Bob Chaput | Jun 17, 2024 | Blog Educational Series - Stop the Cyber Bleeding | Putting ECRM into Action, Blog Series - Overseeing the Development of Your ECRM Framework and Strategy, Governance, Strategy, and Alignment
It’s like deja-vu all over again.—Yogi BerraIntroductionI’ve discussed the CISO role evolving “From Cyber Guardian to Boardroom Luminary” in two previous articles. One was entitled “From Cyber Guardian to Boardroom Luminary—Yogi Berra,” and it refers to the quote...
by Bob Chaput | Feb 19, 2024 | Blog Series - Overseeing the Development of Your ECRM Framework and Strategy, Governance, Strategy, and Alignment
Cyber Risk Literacy – 4 – ECRM Program vs. Cybersecurity StrategyBy failing to prepare, you are preparing to fail.—Benjamin Franklin[1]First, in case you didn’t notice, I have changed the series title from “Cyber Risk Illiteracy” to “Cyber Risk Literacy.” After all,...
by Bob Chaput | Feb 15, 2024 | Blog Series - Overseeing the Development of Your ECRM Framework and Strategy, Governance, Strategy, and Alignment
Cyber Risk Illiteracy – 3 – ECRM? ERM?A definition is the enclosing a wilderness of idea within a wall of words.—Samuel Butler[1]Oh, man! Do we ever need to enclose the wilderness of enterprise cyber risk management and cybersecurity ideas within a wall of words?!?...