Tag: Compliance

Control Validation – What is control validation?

GRC – What is Governance, Risk, and Compliance?

Zero Trust Maturity Model – What is the ZTMM?

Vendor Risk Assessment – What is a vendor risk assessment?

Uncertainty Modeling – What is uncertainty modeling?

Vendor Concentration Risk – What is vendor concentration risk?

Tolerance Threshold – What is a tolerance threshold?

Top Risk Narrative – What is a top risk narrative?

Third-Party Risk Management – What is third-party risk mgmt?

System Security Plan – What is a system security plan?

Supervisory Expectation Mapping – What is it?

Stakeholder Impact Mapping – What is stakeholder impact mapping?

SBOM – What is a Software Bill of Materials?

Shared Responsibility Model – What is a shared responsibility model?

SOC 2 – What is Service Organization Control 2?

Security ROI – What is Security ROI?

Security Program Maturity – What is security program maturity?

Security Policy – What is a security policy?

Security Control Baseline – What is a security control baseline?

Security Control Ownership – Who owns security controls?

SEC – What is the Securities and Exchange Commission?

Scenario Severity Modeling – What is scenario severity modeling?

Risk Treatment – What is risk treatment?

Risk Velocity – What is risk velocity?

Risk Transfer – What is risk transfer?

Risk Scenario Modeling – What is risk scenario modeling?

Risk Sensitivity Analysis – What is risk sensitivity analysis?

Risk Signal Quality – What is risk signal quality?

Risk Normalization – What is risk normalization?

Risk Owner – What is a risk owner?

Risk Decomposition – What is risk decomposition?

Risk Distribution Curve – What is a risk distribution curve?

Risk Heat Map – What is a risk heat map?

Risk Mitigation – What is risk mitigation?

Risk Confidence Interval – What is a risk confidence interval?

Risk Communication – What is risk communication?

Risk Acceptance Rationale – What is risk acceptance rationale?

Risk Aggregation – What is risk aggregation?

Risk Aggregation Bias – What is risk aggregation bias?

Risk Acceptance – What is risk acceptance?

Residual Risk – What is residual risk?

Recovery Time Objective – What is an RTO?

Recovery Point Objective – What is an RPO?

Probable Loss Exposure – What is probable loss exposure?

Plan of Action and Milestones – What is a POA&M?

Operational Resilience – What is operational resilience?

Operational Dependency Risk – What is operational dependency risk?

NIST Cybersecurity Framework – What is the NIST CSF?

Multi-Cloud Governance – What is multi-cloud governance?

Mission Impact Modeling – What is mission impact modeling?