Tag: ICT risk

For EU-regulated firms, managing technology risk is no longer just sound practice. Under DORA, NIS2 and ISO 27001, it is a legal or contractual...

Every organisation needs a way to identify risk, score it, decide what to do, and check whether that decision held. According to Copla, that structure,...

Continuous compliance is often confused with continuous control monitoring, but the two are not the same thing, and the difference is costing firms visibility...

Governance, risk and compliance have operated as three separate disciplines for decades, but GRC makes the case for running them as one connected system...

Zeidler Group has delivered a tailored training session on the Digital Operational Resilience Act (DORA) to the senior management of a mid-sized investment firm...