|
|
On-Premise vs. Hosted Technology
|
0
|
22 days ago
by
Tim Barthold
|
|
|
|
Template for certification
|
0
|
one month ago
by
Anonymous Member
|
|
|
|
Vendor acquired after assessment was completed
|
1
|
one month ago
by
Michelle Chase
Original post by
Anonymous Member
|
|
|
|
Questions for Residual risk assessments
|
4
|
one month ago
by
Tom Simmons
Original post by
Anonymous Member
|
|
|
|
When to conduct a risk assessment
|
1
|
one month ago
by
Hilary Jewhurst
Original post by
Anonymous Member
|
|
|
|
Navex, Logic Manager, or Diligent GRC Software
|
2
|
2 months ago
by
Mark Ewert
Original post by
Tim Barthold
|
|
|
|
Concentration Risk
|
3
|
2 months ago
by
Michelle Chase
Original post by
Anonymous Member
|
|
|
|
Microsoft Cloud Hosting versus Internal Hosting
|
2
|
2 months ago
by
Michelle Chase
Original post by
Anonymous Member
|
|
|
|
Risk Rating Scale
|
9
|
3 months ago
by
Tracey Campbell
Original post by
Tim Barthold
|
|
|
|
Architecture Show Stopper Risks
|
1
|
3 months ago
by
Kate Wakefield
Original post by
Dan Even
|
|
|
|
Offboarding vendor questionnaire
|
6
|
4 months ago
by
Ivan Martin
Original post by
Srinivasa Rao
|
|
|
|
Labeling or categorizing remediation plans?
|
1
|
4 months ago
by
Hilary Jewhurst
Original post by
Anonymous Member
|
|
|
|
4th Party Assessment
|
1
|
6 months ago
by
Anonymous Member
|
|
|
|
Final Risk Summary Report
|
1
|
6 months ago
by
Wesley Carrington
Original post by
Anonymous Member
|
|
|
|
Risk Assessment for the US Federal Reserve Bank
|
1
|
7 months ago
by
Hilary Jewhurst
Original post by
Anonymous Member
|
|
|
|
Foreign Contractors
|
2
|
8 months ago
by
Michelle Chase
Original post by
Margaret Lawhorne
|
|
|
|
SOC 2 vs ISO 27001 & ISO 27701
|
5
|
8 months ago
by
Sam Shade
Original post by
Mark Ewert
|
|
|
|
Identifying Nth party supply chain impacts in Ukraine or surrounding regions
|
1
|
8 months ago
by
Aaron Kirkpatrick
Original post by
Dave Pendroy
|
|
|
|
Business Impact Questionnaire
|
3
|
8 months ago
by
Larry Timmins
Original post by
Natalia Weems
|
|
|
|
Identifying critical indirect categories
|
1
|
9 months ago
by
Hilary Jewhurst
Original post by
Anonymous Member
|
|
|
|
Supplier Risk Assessment
|
3
|
9 months ago
by
Jamie Sumter
Original post by
Anonymous Member
|
|
|
|
Technology Risk Assessments
|
1
|
9 months ago
by
Aaron Kirkpatrick
Original post by
Anonymous Member
|
|
|
|
Determining the Criticality (materiality) of the Third Party
|
2
|
10 months ago
by
Anonymous Member
|
|
|
|
Critical and High-Risk Vendors
|
4
|
10 months ago
by
Michelle Chase
Original post by
Anonymous Member
|
|
|
|
Financial assessments on 4th Party
|
2
|
10 months ago
by
Scott Watson
|
|
|
|
Classifying Findings/Gaps - Risk Levels
|
1
|
one year ago
by
Anonymous Member
|
|
|
|
MERS (Mortgage Electronic Registration System)
|
1
|
one year ago
by
Hilary Jewhurst
Original post by
Anonymous Member
|
|
|
|
Risk Assessments as a Service
|
7
|
one year ago
by
John Buzzell
Original post by
Anonymous Member
|
|
|
|
Out of scope/In scope list
|
1
|
one year ago
by
Anonymous Member
|
|
|
|
Locating vendors
|
8
|
one year ago
by
Greg Schmeisser
Original post by
Anonymous Member
|
|
|
|
Large Business Organizations
|
2
|
one year ago
by
Hilary Jewhurst
Original post by
Anonymous Member
|
|
|
|
Inherent Risk - Physical Access
|
4
|
one year ago
by
Anonymous Member
|
|
|
|
Strategic Partners
|
1
|
one year ago
by
Nicole O'Brien
Original post by
Gail Brockhouse
|
|
|
|
Financial Risk Assessments - Inherent vs. Residual Risk Ratings
|
2
|
one year ago
by
Tricia Patterson
|
|
|
|
Risk rating help
|
1
|
one year ago
by
Kate Thone
Original post by
Anonymous Member
|
|
|
|
Inherent Risk Questionnaire
|
1
|
one year ago
by
Nicole O'Brien
Original post by
Anonymous Member
|
|
|
|
Skip Tracing Vendor
|
1
|
one year ago
by
Hilary Jewhurst
Original post by
Brian Bowen
|
|
|
|
Vendor Questionnaire/Vendor Risk Assessment
|
3
|
one year ago
by
Kimberlie Park
Original post by
Morgan Cannizzo
|
|
|
|
Ethical code of conduct
|
3
|
one year ago
by
Payal Bhojwani
Original post by
Anonymous Member
|
|
|
|
Completion of Third Party Risk Assessments
|
3
|
one year ago
by
Anonymous Member
|
|
|
|
Outsource experience with InfoSec reviews
|
1
|
one year ago
by
Mark Eden
Original post by
Anonymous Member
|
|
|
|
Where to Source Data Breach Records
|
2
|
one year ago
by
Brad Buckley
|
|
|
|
How long should a risk assessment take from end to end?
|
5
|
one year ago
by
Anonymous Member
|
|
|
|
Faster Payment Risk Assessments
|
1
|
one year ago
by
Anonymous Member
Original post by
Kevin Olsen
|
|
|
|
Consultants
|
1
|
one year ago
by
Nicole O'Brien
Original post by
Anonymous Member
|
|
|
|
SOC CUEC Mapping
|
2
|
one year ago
by
Rachel Kenyon
|
|
|
|
Requesting compliance documentation from vendors
|
7
|
one year ago
by
Carl Fricke
Original post by
Calista Wegner
|
|
|
|
Bank outsourcing sale to Third Party agency
|
3
|
one year ago
by
Hilary Jewhurst
Original post by
Anonymous Member
|
|
|
|
Residual Risk calculation
|
2
|
one year ago
by
Carl Fricke
Original post by
Anonymous Member
|
|
|
|
Vendors Acquired during assessment
|
3
|
one year ago
by
Angela Hirsch
Original post by
Anonymous Member
|
|