Resource Center

What are ESG (Environmental, Social and Governance) criteria?

Criminal compliance in the supply chain

How to Consider Controls in a Risk Management Strategy

The Compliance Officer and the Compliance Committee

Business continuity planning with GRC

ISO 27036 – Information Security for Supplier Relationships

What are key risk indicators (KRIs)?

What key risk indicators (KRIs) are, how to define them around likelihood, impact, risk value or control effectiveness,…

What is a process map and how do you build one?

What a process map is, how processes are classified and laid out, an ISO 9001 process map example, a sample process she…

What is ITIL and what is it for?

What is the NIST Cybersecurity Framework?

What is the Internal Audit Report?

Balanced Scorecard: what it is and what it can do for you

What the Balanced Scorecard is, its four perspectives, how to build a strategy map with an example, and how to choose t…

What is the SOX Act and What is it For?

GDPR and conservation periods of personal data

Risk assessment methods: MEHARI, EBIOS and OCTAVE

A comparison of three well-known information security risk assessment methods, MEHARI, EBIOS and OCTAVE: who created th…

What are the Advantages Offered by the ISO 37001 Standard?

ISO 14001: Keys and Principles of the Standard

How to implement an IT risk framework

Security Audits

Automation of the model of the 3 lines of defense