article thumbnail

Risk Management under the DORA Regulation

IT Governance

In fact, in 2020–2022, the financial sector was the second-most attacked sector, topped only by the retail and manufacturing sector. Three key DORA requirements There are three fundamental requirements to this regulation: Risk management Incident management Supply chain security These drive the other, lower-level requirements in DORA.

Risk 104
article thumbnail

SEC Announces 2022 Examination Priorities: Private Funds, ESG, Retail, Cyber, Digital Assets Top the List

Data Matters

1 Consistent with its recent rulemaking activity, in its accompanying release, the SEC highlighted private funds; Environmental, Social and Governance (ESG) investing; retail; cyber; and digital assets as key examination priorities. Private Fund, ESG Investing, Retail Investors, Cybersecurity, Fintech, and Digital Assets.

Retail 88
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

DPIAs for retail and hospitality 

IT Governance

A DPIA is essentially a risk assessment that needs to be conducted before carrying out any processing activities, particularly those “using new technologies”, that are “likely” to result in a “high risk” to the rights and freedoms of natural persons. A DPIA assesses risk. All decisions should be recorded and signed off.

Retail 78
article thumbnail

6 climate change adaptation strategies every organization needs today

IBM Big Data Hub

Risks from wildfires, floods, heat, drought and wind have always been a concern, but climate change has intensified these risks, making them more frequent and unpredictable for organizations. For instance, proactively identify high-risk assets and develop a contingency plan.

article thumbnail

MY TAKE: New ‘cyberthreat index’ shows SMBs cognizant of big risks, ill-prepared to deal with them

The Last Watchdog

Small and midsize businesses — so-called SMBs — face an acute risk of sustaining a crippling cyberattack. This appears to be even more true today than it was when I began writing about business cyber risks at USA TODAY more than a decade ago. I had the chance at RSA 2019 to discuss the SMB security landscape at length with Gill.

Risk 183
article thumbnail

Top 10 Governance, Risk and Compliance (GRC) Vendors

eSecurity Planet

Governance, risk, and compliance (GRC) software helps businesses manage all of the necessary documentation and processes for ensuring maximum productivity and preparedness. It includes multi-disciplinary risk and compliance management solutions and tools, including: IT & security risk management. Audit management.

article thumbnail

NEW TECH: This free tool can help gauge, manage third-party cyber risk; it’s called ‘VRMMM’

The Last Watchdog

Turn the corner into 2019 and we find Citigroup, CapitalOne, Wells Fargo and HSBC Life Insurance among a host of firms hitting the crisis button after their customers’ records turned up on a database of some 24 million financial and banking documents found parked on an Internet-accessible server — without so much as password protection.

Risk 147