Illuminating the intersection of physical and cyber security

Risk Management

Artificial intelligence (AI) is becoming basic tables stakes for nearly any organization. Whether a software company embeds it into their product or a website uses it to answer questions, AI agents are changing the world. In a May 2025 survey, 75% of senior executives agreed or strongly agreed that AI […]

AI Agent Ownership – An Underlying NIST AI Risk Management ...

This entry was posted in AI Cybersecurity Risk Management on August 20, 2025 by Editorial Staff

ABC analysis in inventory is a useful classification system businesses use to rank stock items based on how essential they are to the organization. Utilizing this model can benefit companies greatly. The same principles can apply to the cybersecurity sector. Learn how businesses can use ABC analysis for cybersecurity risk […]

Applying ABC Analysis to Cybersecurity Risk Management

This entry was posted in Cybersecurity Risk Management on October 16, 2023 by Editorial Staff

This week on BSM’s podcast S5E15, we dive deep into the world of Attack Surface Management with Marc Gaffan, the visionary CEO of ⁠IONIX⁠. The rapidly evolving digital landscape poses new challenges every day, and for businesses, it’s not just about defense but smart prevention. What if there was a […]

Attack Prevention: Surface Reduction & Risk Management

This entry was posted in Cybersecurity Podcast Risk Management and tagged IONIX on September 5, 2023 by Steven Bowcut

Alan Kohler will also Bolster Pamir Capabilities Advising US Companies with Mitigating Business Risk in China WASHINGTON, D.C. – As rising geo-political tensions continue to affect US organizations with operations in China, Pamir Consulting, a Washington-headquartered risk management consultancy, today announced a new team of China specialists headed up by FBI […]

FBI veteran joins Pamir Consulting to Safeguard Billions of Dollars ...

This entry was posted in Industry News Intellectual Property Protection Press Release Risk Management and tagged Pamir Consulting on May 23, 2023 by Editorial Staff

Vulnerability management is the practice of identifying and mitigating software vulnerabilities. Risk management is the practice of identifying and preventing unfortunate events such as natural disasters, medical device failure or plane crashes.

What’s the Difference Between Risk Management & Vulnerability Management?

This entry was posted in Cybersecurity Guest Contributor Risk Management Vulnerability Assessment on April 11, 2023 by Editorial Staff

By Pawneet Abramowski Trade/ Economic sanctions are a powerful tool. The rules and regulations dictated by governments for various reasons can majorly impact national economies and affect businesses of all sizes. The war in Ukraine unsurprisingly prompted the President, the US. Treasury department and other nations to increase sanctions against […]

Regulations, Risks and Reputation: The 3Rs to Consider How Sanctions ...

This entry was posted in Guest Contributor Risk Management on January 26, 2023 by Editorial Staff

By Sal Petriello, Director of Integrated Risk Management Strategy at NAVEX It’s no longer enough to only manage and mitigate the “human risk” of internal employee behavior as organizations increasingly share sensitive data with third-party partners that are critical to their operations and supply chains. Even with limited resources, risk […]

Properly Managing the Human Side of Information Security

This entry was posted in Cybersecurity Guest Contributor Risk Management on November 19, 2022 by Editorial Staff

By Lindsay Woolward, Consultant, Guidepost Solutions Cyberattacks, fire, volatile employees, and targeted violence can show up at unexpected times and pose serious operational risk to organizations of all sizes. But how can you prepare for a random chance that could have an enormous impact on you, your people, and your […]

Harnessing the Power of Risk Data

This entry was posted in Guest Contributor Risk Management and tagged Guidepost Solutions on August 1, 2022 by Editorial Staff

By Sal Petriello, Director of Integrated Risk Management Strategy at NAVEX Recent coverage of cybersecurity incidents stemming from compromises of organizations’ third-party vendors highlights an important, yet often overlooked, aspect of risk management. While the specifics of execution can be complex, it is imperative for risk managers to grasp and […]

The Pillars of Third-Party Risk Management

This entry was posted in Cybersecurity Guest Contributor Risk Management and tagged NAVEX on May 3, 2022 by Editorial Staff

By Karen Bolton, CEO, Nettitude Commonly recognized as one of the biggest risks to any organization, cybersecurity is at the top of boardroom agendas. With digital transformation accelerating across the globe, effective assurance is crucial for entire digital ecosystems. Organizations must protect vital assets from attack and damaging compromise while […]

Cybersecurity and the Future of Assurance in an Ever-Changing Risk ...

This entry was posted in Cybersecurity Guest Contributor Risk Management and tagged Nettitude on November 29, 2021 by Editorial Staff

By Peter Kelley OneTrust, a fast-growing data privacy, compliance and governance enterprise platform backed by leading VCs, has acquired Shared Assessments, the global membership organization dedicated to developing the best practices, education, and tools to drive third-party risk assurance. Recent global events such as the COVID-19 pandemic and Solar Winds […]

OneTrust Acquires Shared Assessments, Third-Party Risk Management Leaders

This entry was posted in Data Protection Privacy Risk Management and tagged OneTrust Shared Assessments on May 5, 2021 by Editorial Staff