Are You Team NIST or Team ISO?
These frameworks on managing information security risk don't have similar approaches. Which one is right for your organization, NIST 800-39 or ISO 27005?
Would Ted Lasso’s Advice Work in IT Risk Management?
While belief may be critical to your business vision, it’s got no place in your IT risk management strategy.
Business Continuity vs. Disaster Recovery: Which Side of the Fence are You on?
What’s the difference between business continuity management and disaster recovery programs? And why do some organizations have two different teams to manage each function?
11 Key Elements of an Effective Crisis Management Plan
This business continuity checklist includes elements that comprise an effective crisis management plan whose goal is to prevent recovery delays and potential financial or operational disaster.
How to Build a Disaster Recovery Strategy
Sometimes planning for disaster recovery is knowing what questions to ask. Let's talk about discuss RTO (Recovery Time Objective) and RPO (Recovery Point Objective).
National Security Warning: Ransomware is an Urgent Business Continuity Risk
Seeing the impact of back-to-back ransomware attacks, in the Biden Administration tells private-sector companies to review cybersecurity posture as a major risk to business operations and resilience.
3 Microlearning Formats that Combat Screen Fatigue
Bite-size training modules, interactivity and gamification are techniques to help employees remember the ethics and compliance online material that they just learned.
The Risk Arc: A Pathway to Business Recovery
We don’t know how to accurately build risk models for the COVID-19 health crisis, and we don’t know how and when the world will spring back from it. SAI Global's Risk Arc serves as a blueprint.
5 Ways to Drive Employee Engagement with Training
The purposeful design of online learning experiences can keep engagement and motivation high – and help ethics and compliance training have a lasting impact.
3 Common Problems with Online E&C Training Modules
Don’t turn online E&C training into a mechanical tick-the-box exercise by forcing employees to sit through stale, passive learning modules.
