The Best of GRC Thought Leadership

Risk, Threat and Vulnerability - What's the difference?

A threat is a potential danger or adverse action that could cause harm or damage. A vulnerability is a weakness or gap in an organization's defenses that could be exploited by a..

7 tips for an effective threat and vulnerability management program

Threat actors are constantly searching for ways to exploit vulnerabilities in networks and software systems. These threats can come from both domestic and global sources and can..

4 elements of a robust vulnerability management program

In the wake of major security breaches, companies have been working to implement stronger and more proactive measures for managing vulnerabilities in their systems. However, as..

The risk based vulnerability management approach

What is risk based vulnerability management? Risk-based vulnerability management is an approach to identifying, evaluating, and prioritizing vulnerabilities in a system or network..

Vulnerability management lifecycle explained!

What is the vulnerability management lifecycle? The vulnerability management lifecycle is a systematic approach to managing and mitigating vulnerabilities in an organization's..

Integrating your ISMS with Nessus & Qualys

Integrating your ISMS with Nessus & Qualys   As many as 84% of software professionals believe that threats to the software supply chain will be the biggest concern in the next..

What is the common vulnerability scoring system and how does it work?

Understanding vulnerability management

Vulnerability management is the process of identifying, assessing, and treating cyber vulnerabilities across systems and software used in an organisation. It is an ongoing,..

Integrating vulnerability management into your ISMS

Integrating Vulnerability Management into your ISMS Despite the increasing threat and a rapidly increasing number of cyber attacks, many companies seem to be struggling with..

Cybersecurity, GRC, and the role of penetration testing

Introduction Cybersecurity has become the top concern for businesses globally with attacks increasing in numbers and becoming more damaging than ever. Cybersecurity and GRC are..