Risk management and governance
With today's exponential advances in technology, CIOs, CTOs, CDOs and other IT leaders need critical advice on risk management and governance. Get news, guides and tips about technology-related compliance and data privacy issues, regulatory frameworks, limits on enterprise software development, cyber risk issues, metaverse dangers, cryptocurrency regulation and more.
Top Stories
-
News
20 Nov 2024
Elon Musk, big tech ties to China raise security concerns
A U.S. senator warns U.S. tech companies that deep ties to China pose national security risks as cyberattacks rise. Time to choose a side, experts say. Continue Reading
-
Tip
19 Nov 2024
Best project portfolio management software and tools in 2025
Project portfolio management software and tools in 2025 promote strategic management of projects and agile tactics. Read our PPM list for guidance on which tools do what. Continue Reading
-
News
11 Oct 2023
Google breakup unlikely in event of guilty verdict
Google is going through an antitrust trial in which a guilty verdict could result in remedies to fix the illegal behavior. But it's unlikely that Google would face a breakup. Continue Reading
-
Definition
10 Oct 2023
risk management specialist
A risk management specialist is a role appointed within organizations to identify potential risks that might negatively affect the business. Continue Reading
-
News
05 Oct 2023
U.S. antitrust law enforcers defend actions, lawsuits
The FTC and DOJ, which enforce U.S. antitrust law, are focused on reining in big tech through antitrust lawsuits and revising merger guidelines for modern businesses. Continue Reading
-
Definition
05 Oct 2023
blockchain
Blockchain is a record-keeping technology designed to make it impossible to hack the system or forge the data stored on it, thereby making it secure and immutable. Continue Reading
-
Definition
05 Oct 2023
enterprise risk management (ERM)
Enterprise risk management (ERM) is the process of planning, organizing, directing and controlling the activities of an organization to minimize the harmful effects of risk on its capital and earnings. Continue Reading
-
Feature
05 Oct 2023
13 types of business risks for companies to manage
To avoid business problems and operate effectively, companies need to be ready to deal with these common types of risks as part of their risk management programs. Continue Reading
-
News
04 Oct 2023
Capital One study: Businesses battle with self-service data
Technical, cultural and financial issues hinder organizations from enacting self-service data strategies that include business users as well as data specialists Continue Reading
-
Definition
03 Oct 2023
Whistleblower Protection Act
The Whistleblower Protection Act of 1989 is a law that protects federal government employees in the United States from retaliatory action for voluntarily disclosing information about dishonest or illegal activities occurring in a government organization. Continue Reading
-
News
02 Oct 2023
Lawyers win in race to generative AI without adequate laws
As Congress drags its feet on passing AI regulations, lawyers are filling the vacuum by helping enterprises navigate court rulings and regulations based on outdated laws. Continue Reading
-
Feature
02 Oct 2023
Generative AI in the enterprise raises questions for CIOs
Technology and business leaders are exploring pivotal issues surrounding adoption strategy, architecture and the IT organization's management responsibilities. Continue Reading
-
News
26 Sep 2023
U.S. antitrust case against Amazon not a clear win
The FTC is looking to make an antitrust case against Amazon for using anticompetitive strategies to harm both sellers and shoppers on its platform. Continue Reading
-
Tip
25 Sep 2023
How to add digital signatures to a PDF
Organizations use digital signatures to secure agreements. Common document applications, such as Adobe Acrobat and macOS Preview, let users quickly add digital signatures to PDFs. Continue Reading
-
Definition
21 Sep 2023
governance, risk and compliance (GRC)
Governance, risk and compliance (GRC) refers to an organization's strategy for handling the interdependencies among the following three components: corporate governance policies, enterprise risk management programs, and regulatory and company compliance. Continue Reading
-
Definition
19 Sep 2023
bitcoin mining
Bitcoin mining is a type of cryptomining in which new bitcoin are entered into circulation and bitcoin transactions are verified and added to the blockchain. Continue Reading
-
News
19 Sep 2023
U.S. government shutdown would crush CHIPS Act momentum
A U.S. government shutdown would significantly impact implementation of the CHIPS and Science Act of 2022 as federal workers would be forced to stay home from work. Continue Reading
-
Definition
19 Sep 2023
total risk
Total risk is an assessment that identifies all the risk factors associated with pursuing a specific course of action. Continue Reading
-
Definition
18 Sep 2023
electronically stored information (ESI)
Electronically stored information (ESI) is data that is created, altered, communicated and stored in digital form. Continue Reading
-
News
15 Sep 2023
DOJ faces hurdles in antitrust battle with Google
The Dept. of Justice will need to overcome several hurdles to prove Google's alleged anticompetitive conduct in the online search market. Continue Reading
-
Tip
14 Sep 2023
How CIOs can build cybersecurity teamwork across leadership
Cross-departmental relationships are key to long-term business success. Discover why CIOs must focus on teamwork with these three C-suite roles for highly effective cybersecurity. Continue Reading
-
Feature
13 Sep 2023
Top 10 benefits of blockchain for business
Blockchain's unique characteristics address many business issues. Here are 10 important benefits of blockchain and examples of the industries taking advantage of them. Continue Reading
-
Tip
08 Sep 2023
Risk prediction models: How they work and their benefits
Accurate risk prediction models can aid risk management efforts in organizations. Here's a look at how risk models work and the business benefits they provide. Continue Reading
-
Definition
08 Sep 2023
key risk indicator (KRI)
A key risk indicator (KRI) is a metric for measuring the likelihood that the combined probability of an event and its consequence will exceed the organization's risk appetite and have a profoundly negative impact on an organization's ability to be successful. Continue Reading
-
Definition
07 Sep 2023
distributed ledger technology (DLT)
Distributed ledger technology (DLT) is a digital system for recording the transaction of assets in which the transactions and their details are recorded in multiple places at the same time. Continue Reading
-
Definition
06 Sep 2023
What is a smart contract?
A smart contract is a self-executing computer program that automatically executes the terms of a contract without the involvement of third parties. Continue Reading
-
Definition
31 Aug 2023
IT controls
An IT control is a procedure or policy that provides a reasonable assurance that the information technology (IT) used by an organization operates as intended, that data is reliable and that the organization is in compliance with applicable laws and regulations. Continue Reading
-
Definition
30 Aug 2023
three lines model
The three lines model is a risk management approach to help organizations identify and manage risks effectively by creating three distinct lines of defense. Continue Reading
-
Definition
30 Aug 2023
IT organization (information technology organization)
An IT organization (information technology organization) is the department within a company that's charged with establishing, monitoring and maintaining information technology systems and services. Continue Reading
-
News
29 Aug 2023
Microsoft Teams attack exposes collab platform security gaps
Criminal and state-sponsored hackers are ramping up cyberattacks on instant messaging platforms and other workplace collaboration tools. Meanwhile, enterprises' readiness lags. Continue Reading
-
Tip
29 Aug 2023
The CIO's role in strengthening cybersecurity
To effectively tackle security risks, organizations should proactively address the complexities of information security. Learn how CIOs can play a key role in cybersecurity. Continue Reading
-
News
22 Aug 2023
Generative AI adoption to grow with economic confidence
A PwC survey is the latest data point signaling a return to innovation spending, with generative AI adoption in the C-suite's plans. But business leaders remain sensitive to risk. Continue Reading
-
Feature
16 Aug 2023
Top 12 risk management skills and why you need them
Effective risk management is necessary in all parts of a business. Here are a dozen skills that risk managers need to be successful in their jobs. Continue Reading
-
Tip
16 Aug 2023
6 open source GRC tools compliance professionals should know
Organizations must meet a variety of regulatory compliance requirements today. Here's a look at six open source GRC tools and related resources that might help. Continue Reading
-
Tip
15 Aug 2023
Top 4 information security strategy essentials CIOs need
Right now, hackers are targeting your organization. Fight back by learning how CIOs can create a resilient and strong information security foundation. Continue Reading
-
Feature
15 Aug 2023
ISO 31000 vs. COSO: Comparing risk management standards
ISO 31000 and the COSO ERM framework are the two most popular risk management standards. Here's what they include and some of their similarities and differences. Continue Reading
-
News
14 Aug 2023
Cloud costs continue to rise among IT commodities
CIOs can expect higher cloud costs as the U.S. government's wholesale inflation index hits its highest rating for the technology category that includes this IT model. Continue Reading
-
News
11 Aug 2023
Biden order will force companies to weigh China investments
Companies are facing a new executive order and potentially congressional action restricting outbound investments in technologies such as quantum computing and AI in China. Continue Reading
-
Feature
11 Aug 2023
Traditional vs. enterprise risk management: How do they differ?
Traditional risk management and enterprise risk management are similar in their aim to mitigate risks that can harm a company. But there are differences between them. Continue Reading
-
Definition
09 Aug 2023
crisis management
Crisis management is the application of strategies designed to help an organization deal with a sudden and significant negative event, while maintaining business continuity. Continue Reading
-
News
07 Aug 2023
EU's antitrust probe into Microsoft comes too late
The EU's history of conduct over structural remedies to allay competition concerns means its Microsoft probe likely won't result in a substantial impact on the company. Continue Reading
-
Feature
07 Aug 2023
Enterprise risk management team: Roles and responsibilities
Every facet of business operations is exposed to risks, requiring a risk management team that's composed of a diverse mix of corporate executives and managers. Continue Reading
-
Feature
04 Aug 2023
9 common risk management failures and how to avoid them
As enterprises rework their business models and strategies to meet various new challenges, risks abound. Here are nine risk management failures to look out for. Continue Reading
-
Feature
03 Aug 2023
Risk appetite vs. risk tolerance: How are they different?
Risk appetite and risk tolerance are related terms but not the same thing. Here's how they differ plus examples of risk appetite and risk tolerance statements. Continue Reading
-
Definition
01 Aug 2023
Computer Fraud and Abuse Act (CFAA)
The Computer Fraud and Abuse Act (CFAA) of 1986 is United States legislation that imposes criminal penalties on individuals who intentionally access a protected computer without proper authorization or whose access exceeds their authorization. Continue Reading
-
Definition
28 Jul 2023
compliance audit
A compliance audit is a comprehensive review of an organization's adherence to regulatory guidelines. Continue Reading
-
Feature
26 Jul 2023
Explaining risk maturity models and how they work
Explore risk maturity models and assessment tools for enhancing enterprise risk management. Improve ERM programs to mitigate risk and gain a competitive edge. Continue Reading
-
News
25 Jul 2023
Wayfair and the generative AI boom
The online home and furniture retailer is using the technology despite challenges such as unauthorized use of data and maintaining data privacy. It also released a room-planning tool. Continue Reading
-
News
20 Jul 2023
U.S. walks line between diplomacy, security with China
Amid talks of further export controls placed on China, administration officials reiterated President Biden's desire for communication and building U.S.-China relations. Continue Reading
-
News
19 Jul 2023
Tensions rise with EU over Digital Markets Act, tech policies
Congress members want the Biden administration to confront the EU about technology policies targeting U.S. businesses. Continue Reading
-
News
18 Jul 2023
A look at writers' battle to get AI vendors to pay them
An Authors Guild open letter asks vendors to pay for works previously used to train generative AI systems and calls for lawmakers to tighten copyright laws. Continue Reading
-
News
17 Jul 2023
Businesses caught in the crosshairs amid U.S., China tensions
As the U.S. and China continue to target each other with restrictive export controls, businesses are caught in the middle of an increasingly tense conflict. Continue Reading
-
Podcast
17 Jul 2023
Targeting AI: Responsible AI means regulation, ethical use
AI users should adhere to ethical standards, particularly in regard to generative AI chatbots, but the promise of the latest tech is too great to not embrace. Continue Reading
-
News
13 Jul 2023
Storage, server prices drop as inflation eases
Server and storage prices declined in June, reflecting cooling inflation, but companies remain intent on containing costs and optimization. Continue Reading
-
Podcast
07 Jul 2023
Impact data powers sustainability strategies for digital age
Unlock new growth potential and sustainability with impact data. Learn more in this podcast. Continue Reading
-
Definition
05 Jul 2023
Dodd-Frank Act
The Dodd-Frank Act (fully known as the Dodd-Frank Wall Street Reform and Consumer Protection Act) is a United States federal law that places regulation of the financial industry in the hands of the government. Continue Reading
-
Feature
22 Jun 2023
Blockchain for businesses: The ultimate enterprise guide
Despite the scary crypto headlines, enterprise blockchain is becoming more practical. Use our in-depth guide to help manage the risks and plan the best deployment for your needs. Continue Reading
-
News
19 Jun 2023
Supreme Court sidesteps Section 230 -- for now
Although the Supreme Court's recent decisions in cases against Twitter and Google avoided ruling on Section 230, the issue will likely be in front of the justices again soon. Continue Reading
-
News
15 Jun 2023
Server prices drop while cloud costs rise in PPI data
The U.S. government's latest inflation reading shows moderating hardware prices, which spiked in mid-2022. Cloud costs, however, have been moving in the opposite direction. Continue Reading
-
News
14 Jun 2023
Global cooperation on tech standards is falling apart
Increasing cooperation between the U.S. and EU on global tech standards will enable rather than hurt competition with China, experts argue. Continue Reading
-
News
13 Jun 2023
Salesforce moves forward with secure, private generative AI
With its new AI Cloud and built-in Einstein GPT Trust Layer, The CRM and CX vendor is investing in generative AI technology and adding data security and privacy features. Continue Reading
-
Tip
09 Jun 2023
Pros and cons of blockchain for ERP
ERP's longevity reaches back to the 1960s, but thanks to blockchain, an old dog may well learn some new business tricks in this ever-changing and modernizing world of technology. Continue Reading
-
Tip
08 Jun 2023
RFI vs. RFP vs. RFQ: What are the differences?
A request for information, a request for proposal and a request for quote are critical documents for procurement. Learn what differentiates each one and when to use them. Continue Reading
-
News
07 Jun 2023
U.S.-China relations hinge on shifting reactionary mindset
Rep. Andy Kim said the U.S. needs to become more proactive in its relationship with China amid growing tensions between the two countries. Continue Reading
-
Tip
06 Jun 2023
9 benefits of cryptocurrency in business
Businesses adopting cryptocurrency can potentially improve their financial liquidity, attract new customers, ensure transaction transparency, reduce fraud and align with Web 3.0. Continue Reading
-
News
05 Jun 2023
Experts doubt U.S. retaliation following China's Micron ban
The Biden administration likely won't retaliate for China's Micron Technology ban but will continue to play the long game garnering independence from China in semiconductor chips. Continue Reading
-
News
01 Jun 2023
A look at 'risk of extinction from AI' statement
The statement equates the potential risk of human eradication from AI to that of nuclear war. However, some argue society should instead mitigate the existing risk of AI bias. Continue Reading
-
News
23 May 2023
Meta fine highlights EU, US data sharing challenges
Until the new EU-U.S. Data Privacy Framework is established, Meta's $1.2 billion euro fine should serve as a warning to U.S. businesses handling EU personal data. Continue Reading
-
Feature
19 May 2023
4 tips CIOs can use to drive change management
CIOs and IT leaders should be key drivers of change management programs. Learn valuable tips for navigating complexity and scaling technology rollouts. Continue Reading
-
News
18 May 2023
FTC warns businesses about biometric information use
The Federal Trade Commission said businesses will be held accountable for the way they use consumers' biometric information. Continue Reading
-
Feature
18 May 2023
How one CIO drives business transformation through tech
Tom Peck, CIDO at Sysco, shares valuable insights into the key role that CIOs play as a transformation driver while managing emerging technologies such as AI. Continue Reading
-
News
16 May 2023
CIOs take on organizational adaptability, resilience
CIOs and other tech executives are bracing their organizations to remain flexible in a period of unpredictable developments and bounce back when they take a punch. Continue Reading
-
Definition
12 May 2023
Generally Accepted Recordkeeping Principles (the Principles)
Generally Accepted Recordkeeping Principles is a framework for managing records in a way that supports an organization's immediate and future regulatory, legal, risk mitigation, environmental and operational requirements. Continue Reading
-
News
11 May 2023
U.S. debt crisis could hit government contractors hard
Government contractors should prepare now for the U.S. to default on its debt, which would result in halted payments among other challenges. Continue Reading
-
Feature
05 May 2023
MIT-CIO event explores digital resilience amid disruption
Allan Tate, executive chair of the MIT Sloan CIO Symposium, shares an overview of the 2023 event, including focus areas such as cybersecurity and tech evaluation. Continue Reading
-
Tip
04 May 2023
How to avoid greenwashing as a marketer
Greenwashing can erode customer trust and damage brand reputation. To avoid it, organizations can offer evidence to support their claims and use sustainability certifications. Continue Reading
-
News
04 May 2023
Examining AI pioneer Geoffrey Hinton’s fears about AI
The 'godfather of AI' claims AI will be misused for political gain and to manipulate humans. His resignation from Google came weeks after tech leaders called for an 'AI pause.' Continue Reading
-
Definition
01 May 2023
Web application firewall (WAF)
A web application firewall (WAF) is a firewall that monitors, filters and blocks Hypertext Transfer Protocol (HTTP) traffic as it travels to and from a website or web application. Continue Reading
-
Definition
01 May 2023
compliance framework
A compliance framework is a structured set of guidelines that details an organization's processes for maintaining accordance with established regulations, specifications or legislation. Continue Reading
-
Tip
28 Apr 2023
12 business continuity trends to keep an eye on
As technology rapidly evolves, IT pros are bound to see countless trends come and go. In business continuity, there are some significant trends shaping up to change the field. Continue Reading
-
Definition
27 Apr 2023
SQL injection (SQLi)
A SQL injection (SQLi) is a technique that attackers use to gain unauthorized access to a web application database by adding a string of malicious code to a database query. Continue Reading
-
News
14 Apr 2023
Tech pricing dips slightly in March as broader PPI declines
Servers, storage and professional services all saw decreases in the U.S. government's latest inflation update. Will prices continue to drop or repeat last year's volatility? Continue Reading
-
News
12 Apr 2023
Governments worldwide attempting to regulate generative AI
Countries worldwide are monitoring the generative systems with their own unique rules and laws. For example, China proposed new laws, and the U.S. requested public comments. Continue Reading
-
Feature
10 Apr 2023
IT spending priorities point to cyber, cloud and data
TechTarget's survey of IT professionals underlines the continued importance of security and cloud initiatives, as well as increased interest in data management and governance. Continue Reading
-
News
07 Apr 2023
Minority access to federal contracts needs improvement
Broadening geographic distribution of federal contracts is one way to help minority and small business access, experts said during a Brookings Institution webinar. Continue Reading
-
News
06 Apr 2023
RESTRICT Act targets IT products beyond U.S. TikTok ban
The RESTRICT Act could face implementation challenges if passed into law, given how it targets IT products owned by foreign countries, including Russia and China. Continue Reading
-
News
30 Mar 2023
The call for an AI pause points to a major concern
The call to stop creating LLMs for six months comes as AI systems become more powerful and are moving too fast. There's a need to address data and privacy concerns. Continue Reading
-
News
30 Mar 2023
Digital Markets Act could usher in big changes to big tech
The EU's Digital Markets Act will be fully in effect by March 2024. Companies that fail to comply could receive fines of up to 10% of their annual global revenue. Continue Reading
-
Feature
28 Mar 2023
Top 10 enterprise technology trends for 2023
IT investments underpin an organizational performance and help businesses gain a competitive edge. That's why CIOs and IT leaders should know the top enterprise tech trends. Continue Reading
-
Definition
28 Mar 2023
Sarbanes-Oxley Act
The Sarbanes-Oxley Act of 2002 is a federal law that established sweeping auditing and financial regulations for public companies. Continue Reading
-
News
27 Mar 2023
AWS public cloud advocate talks cloud spend, ChatGPT and ESG
In this Q&A, AWS' Mark Schwartz argues that a pure cloud future is inevitable to manage ESG compliance, test cutting edge technologies and weather economic turbulence. Continue Reading
-
News
23 Mar 2023
U.S. policymakers press TikTok CEO on China's data access
U.S. lawmakers questioned TikTok CEO Shou Chew about China's access to U.S. data and how TikTok plans to mitigate concerns about the spread of harmful content on the platform. Continue Reading
-
Definition
23 Mar 2023
project charter
A project charter is a formal short document that states a project exists and provides project managers with written authority to begin work. Continue Reading
-
Definition
23 Mar 2023
project constraint
A constraint in project management is any restriction that defines a project's limitations. Continue Reading
-
News
21 Mar 2023
Tech competition with China remains top of mind for U.S.
U.S. competition with China on technology has advanced beyond legislation as the Biden administration mulls rules for limiting investments in the Chinese tech sector. Continue Reading
-
News
16 Mar 2023
FTC orders study of deceptive advertising on social media
The Federal Trade Commission has ordered eight social media companies, including Meta's Facebook and Instagram, to report on how they monitor deceptive advertising. Continue Reading
-
News
14 Mar 2023
Reasons for and effects of Microsoft cutting AI ethics unit
The tech giant has garnered much attention for integrating ChatGPT technology into its applications. However, eliminating its AI ethics unit raises questions. Continue Reading
-
Definition
14 Mar 2023
transcription error
A transcription error is a type of data entry error commonly made by human operators or by optical character recognition (OCR) programs. Continue Reading
-
News
14 Mar 2023
Silicon Valley Bank failure might further stymie tech funding
While the finance and tech sectors shuddered after the sudden demise of two tech-focused banks, financial damage appears to be contained amid general slowdown in tech funding. Continue Reading
-
Definition
14 Mar 2023
information security (infosec)
Information security (infosec) is a set of policies, procedures and principles for safeguarding digital data and other kinds of information. Continue Reading
-
News
09 Mar 2023
U.S. senators renew efforts to rein in big tech, ban TikTok
U.S. senators showed concern for national security when it comes to popular tech platforms owned and operated by foreign entities through the introduction of the RESTRICT Act. Continue Reading
-
News
06 Mar 2023
U.S. agencies look to existing rules for crypto, Web3 regulation
While the EU is considering new cryptocurrency regulation, the U.S. Securities and Exchange Commission is focused on heightening enforcement of existing rules. Continue Reading