This post first appeared on IBM Business of Government. Read the original article. Monday, November 9, 2020 John Kamensky It started earnestly enough: Congress provided focus, authority, and professionalization for specific, enterprise-wide mission support functions in order to improve government operations. The CFO Act of 1990 authorized Chief Financial Officers as the first statutory mission (more…)
Applying the Pareto Principle for Personal and Professional Success
This post first appeared on Risk Management Monitor. Read the original article. Vilfredo Pareto, an Italian economist born in 1848, was apparently also a keen gardener, and like all keen gardeners, Vilfredo knew not all plants are created equal. Some of them produced a great crop of abundance, and some of them had very little to (more…)
Managing Risk in the Public Sector
This post first appeared on IBM Business of Government. Read the original article. Over the decade, the IBM Center has invested substantial time and resources in researching the discipline, application, and use of risk management in government. We have published the work of leading academics as well as captured the expertise of front-line practitioners chronicling (more…)
ERM in the Spotlight
This post first appeared on Risk Management Magazine. Read the original article. In times of great upheaval for industries or financial markets, organizations often turn to the formal discipline of enterprise risk management. After the 9/11 terrorist attacks and the 2008 financial crisis, for example, ERM gained traction as many organizations realized the significant drawbacks (more…)
CPRA and the Evolution of Data Compliance Risks
This post first appeared on Risk Management Magazine. Read the original article. Although it has been less than a year since the implementation of the California Consumer Privacy Act (CCPA), Californians will once again vote on consumer privacy laws in the November election. Also known as Proposition 24, the new California Privacy Rights Act (CPRA) (more…)
Compliance Operations During COVID-19
This post first appeared on Risk Management Magazine. Read the original article. Compliance is a critical function that receives attention from both internal audit teams and regulatory and legislative agencies. Given the sensitivity of their work, compliance functions have traditionally been office-based, existing on a secured floor or area within the organization. While some organizations (more…)
Cybersecurity Controls as the Workforce Returns
This post first appeared on Risk Management Magazine. Read the original article. The COVID-19 pandemic has forced organizations to quickly implement contingency plans to sustain their operations. For those businesses that have remained operational, IT and security teams have often been so focused on securing their newly remote workforces that they have had little time (more…)
Fewer Companies Taking Cyberrisk Mitigation Steps
This post first appeared on Risk Management Magazine. Read the original article. Concerns about threats and the volume of cyberattacks experienced have increased during the pandemic, yet fewer companies have taken steps to mitigate cyberrisk than even a year ago, according to the 2020 Travelers Risk Index. Of the 1,200 business leaders surveyed, 22% said (more…)
Companies Struggling with Third-Party Cyberrisk
This post first appeared on Risk Management Magazine. Read the original article. In a recent study by cybersecurity firm BlueVoyant, more than 90% of the 301 American CIOs, CISOs and chief procurement officers surveyed have experienced a data breach in the past year because of a weakness in their supply chain. However, 69% said that (more…)
Weekly Roundup: October 26-30, 2020
This post first appeared on IBM Business of Government. Read the original article. Friday, October 30, 2020 Michael J. Keegan Highlighting articles and insights that we found interesting for the week ending October 30, 2020 Michael J. Keegan DOD could get permanent telework capability in 2021. The Defense Department wants to convert its key telework (more…)