Process guidelines and a framework for boards of directors and senior management must be considered when providing oversight, examination and risk management of third-party business relationships in the areas of information technology, systems and cyber security.

There is no stagnation in information security. One major national incident often leads to more robust reporting requirements.

Digital identity has the power to propel your enterprise forward…or it can cause you to crash and burn. How you govern and manage it will make all the difference.

Sandboxes are widely used to detect malware. They provide a temporary, isolated and secure environment to observe if a suspicious file attempts anything malicious.

By showing what would have changed if a previously successful big data analytics project was performed given today’s governance.

The ISO and the IEC’s ISO/IEC 27001:2013 standard has defined the requirements for an information security management system (ISMS).

As a relentless wave of cyberattacks continues, organizations are under intense pressure from key stakeholders and regulators to implement and enhance their cyber security programs to protect customers, employees and the valuable information in their possession.

We are in the process of selecting a data loss prevention (DLP) tool.

I do not believe in information security.

By the time this article is published, it will have been about 20 months since the US Federal Bureau of Investigation (FBI) unlocked the iPhone of the San Bernardino, California, gunman who killed 14 people.

How do you think the role of IS auditor is changing or has changed?

In the world of information systems, data has gained the most influential position. Data are about entities—resource.