GRC Archives - Page 3 of 5 - Tech Prognosis Blog

NBA Fines And Non-Compliance Lessons for SMBs

December 27, 2023December 25, 2023 by Daniel Ihonvbere

NBA Fines And Non-Compliance Lessons for SMBs

Regulations on the local, state, and federal levels are on the rise and this is putting a lot of pressure on compliance efforts of Small and Medium-sized businesses (SMBs) and exposing the fact that these organizations can only avoid costly fines and/or lawsuits for non-compliance by maintaining strict compliance throughout their information management processes.

I found the fines levied by the National Basketball Association (NBA) on players including the likes of the late Los Angeles Lakers Great, Kobe Bryant, and Mark Cuban, the owner of the Dallas Mavericks basketball team, among others, as a good lesson on the cost of non-compliance.

The NBA has consistently fined players who were in non-compliance of its rules and these violations range from the serious to what one could argue is the absurd – like kicking a ball in frustration or throwing a basketball into the stands in celebration of a win.

Strengthening Your Organization’s Security with CIS Critical Security Controls

December 9, 2023 by Daniel Ihonvbere

Ilustration showing a man and a woman with laptops performing a system audit with the five CIS Critical Security Controls outlined on a page in a binder.

In today’s digital landscape, where security threats loom large, safeguarding your organization’s sensitive data and digital assets is paramount. Fortunately, the Center for Internet Security (CIS) Critical Security Controls offers a practical roadmap to bolster your security posture.

In this article, we will explore how any organization, regardless of size or industry, can enhance its security using the CIS Critical Security Controls.

What are the CIS Security Controls?

The CIS Critical Security Controls (CIS Controls) are a prescriptive, prioritized, and simplified set of best practices that you can use to strengthen your organization’s cybersecurity posture. Today, thousands of cybersecurity practitioners from around the world use the CIS Controls and/or contribute to their development via a community consensus process.

Navigating White-Collar Crimes: Unveiling the Lack of Recognition Theory

December 7, 2023December 2, 2023 by Daniel Ihonvbere

Decoding White-Collar Crimes: Unveiling the Lack of Recognition Theory Through Real-Life Scenarios

In the complex world of corporate conduct, the “Lack of Recognition” theory stands out as a compelling force behind unintentional white-collar crimes. This theory not only encompasses employees feeling undervalued but also sheds light on situations where individuals inadvertently breach laws, rules, or regulations.

To explore this concept, consider the following white-collar crime definition:

What Are White-Collar Crimes?

White collar crimes refer to non-violent crimes committed through deceptive practices, for the purpose of financial gain. Typically, white-collar crimes are committed by business people who are able to access large amounts of money, though the term is sometimes applied to others who pilfer monies in other circumstances. White collar crimes are non-violent, and are committed by a broad range of activities, such as insider trading.

In this blog post, we’ll delve into the challenges posed by the Lack of Recognition theory, exploring strategies that compliance officers can deploy to mitigate white-collar crime with the help of real-life examples and case studies to bring these concepts to life.

Building a Robust Anti-Corruption Framework: Safeguarding Business Integrity in a Global Marketplace

November 30, 2023November 28, 2023 by Daniel Ihonvbere

In today’s interconnected global marketplace, maintaining the highest standards of ethical conduct is non-negotiable. Recent challenges faced by companies emphasize the need for a comprehensive anti-corruption framework to safeguard business integrity.

In this comprehensive guide, we’ll explore key policies and practices to enhance corporate integrity, addressing both internal employee conduct and the critical realm of third-party vendor relationships, paying particular attention to key policies and practices that every company, especially major retailers, should adopt to prevent internal and third-party corruption risks.

In light of the recent compliance concerns regarding potential corrupt behavior by some third-party vendors, it is crucial that organizations enhance efforts to prevent such activities.

A Guide to Compliance and Risk Management for Cybersecurity

November 19, 2023November 13, 2023 by Daniel Ihonvbere

Safeguarding Your Digital Fortress: A Guide to Compliance and Risk Management for Cybersecurity

Introduction

The battle to protect sensitive information and maintain the trust of clients and stakeholders is of paramount importance, especially now. Cybersecurity is at the forefront of our defense in this battle, and it is underpinned by two critical pillars: compliance and risk management.

In this article, we will explore the significance of compliance and risk management in an organization and provide clear steps on how to leverage both to fortify your cybersecurity defenses. Whether you’re a small startup or a multinational corporation, this guide will help you navigate the complex world of cybersecurity with ease.

NIST Cybersecurity Framework: A Guide for a Board of Directors

November 13, 2023November 10, 2023 by Daniel Ihonvbere

Cyber threats are on the rise, safeguarding our organization’s valuable assets and sensitive information has become paramount and staying ahead of the game is now essential. Enter the National Institute of Standards and Technology (NIST) Cybersecurity Framework—a comprehensive guide designed to help businesses like ours navigate the complex world of cybersecurity.

In this article, we’ll break down the NIST Cybersecurity Framework in a way that’s easy to understand, ensuring that every member of your board of directors is on the same page.

What is a cybersecurity framework?

A cybersecurity framework provides a common language and set of standards for security leaders across countries and industries to understand their security postures and those of their vendors. With a framework in place it becomes much easier to define the processes and procedures that your organization must take to assess, monitor, and mitigate cybersecurity risk.