Posts

Showing posts from August, 2021

Completing IT Risk Assessments

Image
  In the world of Compliance, risk assessments are the foundation of a protected business. Knowing what risks are out there, how to mitigate them, and what your risk appetite is, will all help to ensure vulnerabilities and shortfalls can be addressed and managed properly. Just like with compliance, IT risk assessments are especially important because the risk landscape is constantly evolving, making it harder to keep up with the changes in risk to your business. Risk assessments can also help to keep costs under control and make audits more efficient. The following steps will assist your business in undertaking a quality IT risk assessment. Identify all possible  vulnerabilities : Make time to document all the possible vulnerabilities that could pose a risk to your business. Include ransomware, DDoS attacks, phishing campaigns, possible routes into your networks and which departments or personnel are more vulnerable than others. Also note any gaps in your current security po...

How to Find Your AML Compliance Gaps

Image
  As an avid reader, my favorite genre is mystery.  A good mystery writer will drop a clue now and then, just enough to keep me guessing and occasionally I may be able to figure out who did the deed once I reach The End. However, as much as I love a good mystery, a compliance manual should not read like one.  And yet, sadly, so many do.  Too many require the reader to hunt for the clues to a company’s anti-money laundering (AML) processes and policies and approach to risk analysis.