Posted inNewsletter
Latest All About GRC Newsletter
Issue #34 covers Black October, ISC2 AI Security Certification, New SOC2 Draft, NIST Guidance on ICT & ERM risks, NIST Security Handbook for Execs
Posted inNewsletter
My Newsletter Resource Library
I share a lot of useful articles, research, frameworks, tools and commentary through the All-About-GRC Newsletter. This page brings all those original sources together in one searchable place, so you…
Posted inNewsletter
The All-About-GRC Newsletter
If you have been following this website for a while, you might have noticed that a newsletter has been quietly running in the background. Ten issues in, I realized I never actually sat down and wrote a proper post about it. So here we are.
Posted inRisk Management
How to make a Cyber Risk Assessor using ChatGPT Projects
I recently made an AI bot at my company that does an initial risk assessment when you give it a potential risk scenario. We have an internal AI agent developer…
GRC Resources
Curated list of resources for people in GRC
Posted inInformation Security
C-I-A Score Calculator Tool
A demo tool to show how to practically use the CIA triad to rate an asset.
Posted inInformation Security Resources Risk Management
Security Risk Assessment Template (Qualitative)
If you do Security Risk assessments of a qualitative nature in your organization, you could use this template for detailed risk documentation. It has pages for describing the risk, evaluating…
Posted inInformation Security
What should be considered a “change”?
The legendary Ron Ross gives some guidance.
Posted inGovernance
What is a “legacy application”?
Four criteria that can be used to classify something to be "legacy"
Posted inFeatured Information Security Resources
ISO 27001 Gap and Maturity Assessment Templates
Two useful resources for people working on ISO 27001 - a Gap Assessment and a Maturity Assessment template