Security & Risk

Information Security Team
By Dorsey McFadden Advisory

05 Jul: InfoSec Can Be Taxing, So Here’s a Taxonomy

Information Security can sometimes feel like death by documentation, like a bunch of red tape just to keep regulators and auditors at bay. Throw in differences in lexicon, and seeing how all the many pieces fit together can be quite difficult.

Getting everyone, practitioner and leadership alike, on the same page when it comes to terminology in the information security space is key. If everyone can speak the same language, a well-understood and well-orchestrated information security governance structure won’t be far off.

Read More
Happy man using smartphone at modern coffee shop.
By Dorsey McFadden Advisory

25 May: Privacy and Security: What’s the Difference?

As data collection has increased, so has controversy. Most of this data has been willingly given by us users in the form of our computers, smart phones, and more recently, smart home devices, cars, and even refrigerators. International regulatory eyes have turned their gazes to some of these massive organizations collecting our data.

Read More
By Dorsey McFadden Advisory

08 May: [VIDEO] Essential Steps to Strengthening Cybersecurity

Many organizations know they must have the basics: hire a CISO, perform a risk assessment, and find security vendors to fill up the holes. Unfortunately, these are often mere boxes to check. Impact Makers’ former CISO Cathie Brown offers a few simple considerations in each of those steps that will strengthen your cybersecurity posture, like what to look for in a robust risk assessment and a trustworthy security vendor.

Read More
managing-risks
By Dorsey McFadden Advisory

24 Apr: Organizational Risk Management Is Not Just About Compliance

Organizational risk management is too often treated as a compliance issue with complex rules that result in a back office tracking of risks that don’t see the light of day.  This presentation contrasts a traditional view of organizational risk management with an alternative view provided in a Harvard Business Review article by Robert S. Kaplan and Anette Mikes.  This categorization of risk allows executives to understand the qualitative distinctions between the types of risks that organizations face.

Read More
1 2