TL;DR. ISACA has effectively called time on the supplier security questionnaire, and Australia’s regulators have moved the same way. Under CPS 230, CPS 234, the SOCI…
Read the article →On 19 August, the Australian Signals Directorate’s Cyber Security Centre issued a high alert titled, without much ceremony, “Act quickly.” Most of the organisations who should…
Read the article →TL;DR. ISACA, the global professional body for governance, risk and assurance, has published a blueprint for modern third-party risk built on five shifts: a contextual risk…
Read the article →AUSTRAC's Operation Claw fraud was legible in the network of intermediaries the whole time. A questionnaire was never going to see it there. Here is where it actually lived.
Read the article →Somewhere in your organisation this morning, a spreadsheet is on its way to a supplier who will spend the better part of a week answering three…
Read the article →If this is the kind of thinking you want on your side of the table, let's talk about your risk operation.
Get in touch