Name: Using a Framework to Guide an IT Security Review
Start: 2023-06-07T16:00:00Z
End: 2023-06-07T16:01:01.000Z
Location: BrightTALK
Rating: 0

AuditBoard is the leading cloud-based platform transforming audit, risk, compliance, and ESG management. Nearly 50% of the Fortune 500 leverage AuditBoard to move their businesses forward with greater clarity and agility. AuditBoard is top-rated by customers on G2, Capterra, and Gartner Peer Insights, and was recently ranked for the fifth year in a row as one of the fastest-growing technology companies in North America by Deloitte. To learn more, visit: AuditBoard.com.

Tune in for an insightful webinar hosted by PRMIA in collaboration with AuditBoard that delves into the critical aspects of enterprise risk management, highlighting key parts of our recent joint white paper, Fragmented to Connected: Achieving Cohesion by Unifying Risk Management. 

The webinar will explore the latest trends, challenges, and best practices in risk management with content supported by data from a comprehensive survey and in-depth discussions with industry practitioners.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Unifying Risk Management - Fragmented to Connected

In today’s digital-first environment, getting compliance and vendor management right is crucial to achieving strategic business objectives. Managing the scale and complexity of modern IT compliance and risk management requires the right tools and strategy.

Join AuditBoard’s industry experts as we share learnings and best practices on how to leverage our IT compliance, third-party, and IT risk management solutions to defend and strengthen your business.

In this live product walkthrough, we’ll cover:
 - How to build and scale a multi-framework IT risk and compliance program for your business.
 - How to understand your threat landscape, quantify risks, and improve cyber resilience.
 - How to streamline vendor evaluation and onboarding as well as visualize and assess your vendor programs to mitigate third-party risks.
 - What’s new with AuditBoard.

*CPEs not offered for this product walkthrough.

AuditBoard Live: IT Compliance and Risk Management

In today's unpredictable world, characterized by a volatile geopolitical landscape, vulnerable markets, and economic uncertainties, organizations face elevated risks across cybersecurity, operational, third-party, and regulatory domains. The traditional GRC programs may no longer suffice in this dynamic risk and compliance environment. To thrive, organizations must enhance their GRC effectiveness and efficiency by leveraging risk insights and intelligence for better decision-making that delivers agility and resilience.

Join GRC 20/20’s Pundit Michael Rasmussen and AuditBoard in a discussion on the latest trends in the GRC market as we prepare for another year filled with both demands and opportunities.

From this webinar:
 - Understand the top risk and regulatory drivers and trends in GRC.
 - Assess your strategies for creating a connected approach to managing interconnected risks.
 - Implement proactive measures to fortify the extended enterprise and mitigate risks.
 - Empower the frontline to build a resilient organization.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Navigate the Dynamic Risk Landscape to Deliver GRC Agility & Resilience

Join us for a lively conversation with IDC Analyst Philip Harris as he discusses how leaders in audit, risk, compliance, and information security functions are tackling the risk and compliance challenges their organizations face. Discover creative ways these leaders are leveraging people, processes, technology, and cross-functional collaboration to navigate these challenges. Philip will share insights, stories, and trends from IDC research, along with findings from numerous customer interviews conducted during the Business Value assessment of AuditBoard’s connected risk platform.

In this webinar, you will learn about:
 - The regulatory environment that’s changing the face of GRC and assurance.
 - The people, process, and technology approach organizations are taking to accelerate transformation and demonstrate measurable strategic impact.
 - What forward-looking GRC and Assurance programs are doing differently to ensure sustainable business growth.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

GRC Insights Unveiled: A Candid Conversation With IDC Analyst Philip Harris

In today’s volatile environment, organizations face unprecedented challenges in managing risks that are growing in complexity and magnitude. The current landscape is fraught with cybersecurity threats, regulatory changes, evolving ESG demands, and digital risks — all of which require a strategic and integrated approach to risk management. 

Recent incidents, such as the AT&T cybersecurity breach and the CrowdStrike IT outage, highlight the escalating risk landscape and underscore the need for robust integrated risk management (IRM). 

Many organizations struggle to keep pace with the rapid emergence of new risks. Traditional risk management frameworks often operate in silos, leading to fragmented oversight and reactive decision-making. This disjointed approach can leave companies vulnerable, undermining their resilience and strategic objectives. The implications for businesses are significant: financial losses, reputational damage, and regulatory penalties are just a few potential outcomes of inadequate risk management.

From this webinar, you will:
 - Learn how to prioritize and manage emerging risks such as cybersecurity, ESG reporting, compliance, and digital risks to safeguard their organizations.
 - Understand the importance of ERM in supporting audit committees and boards, ensuring robust governance frameworks amidst growing uncertainties.
 - Discover best practices for integrating ERM, ORM, TRM, and GRC using IRM technology to create a cohesive and proactive risk management strategy.
 - Gain critical insights from the 2024 CAQ-Deloitte Audit Committee Practices Report and Wheelhouse Advisors’ 2024 IRM Navigator™ Annual Viewpoint Report, offering guidance on navigating the IRM technology market and making informed decisions.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Leading Through Uncertainty: Risk Management Essentials in 2024 and Beyond

Forging and executing strategic plans for internal audit functions has long been a leading practice in the profession. However, The IIA’s new Global Internal Audit Standards will mandate that chief audit executives “plan strategically” to ensure the function is sufficiently resourced and positioned to support the organization’s success. The new requirement will be a paradigm shift for many internal audit functions that are managed tactically one year at a time. 
At the end of this session, attendees will be able to:
- Explain the value of planning and leading strategically.
- Prepare for the requirements mandated by the new standards.
- Implement best practices in forging a strategic plan.
- Align internal audit strategy with the enterprise
- Describe the imperative to execute and refresh the internal audit strategic plan.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

The Clock is Ticking: Does Your Strategic Plan Align With the New IIA Standards?

Risks are accelerating at a startling rate with no signs of slowing down, and new threats are constantly emerging. Based on insights from hundreds of frontline risk professionals, the 2024 AuditBoard Digital Risk Report investigates the emerging trends driving this transformation. Join us as we discuss the takeaways from this year's report. 
- Recognize how to identify emerging risks to your organization, such as AI and other emerging technology risks.
- Identify the types of risks that are growing as a result of the business resilience gap.
- Close the gap between risk functions in order to operate more effectively as a connected risk organization.
- Use best practices to perform effective digital risk management.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Be on the Lookout! Digital Risk Trends and Drivers

In addition to high level business objectives, risks, and audit plans, centralizing and connecting risk and controls across the organization is becoming a top priority for Boards in 2024. This is largely being driven by the influx of new regulatory requirements, including the UK Corporate Governance Code Reform and the EU’s Corporate Sustainability Reporting Directive (CSRD) requiring organizations to develop stronger risk based internal controls. In addition to compliance with these new requirements, the benefits of a strong risk and controls environment include: enhanced fraud detection and prevention, improved investor confidence, and support for better decision-making.

This webinar covers the importance of connecting and centralizing risks and controls across your business to drive compliance with the UK’s Corporate Governance Code Reform and CSRD. 

In this webinar you will learn:
- The pain points of building a strong risk and controls-focused culture in a manual environment.
- Best practices for empowering your control owners to test their controls more efficiently and effectively.
- The benefits of connecting your internal controls and risks across the organization and how AI & Analytics could help.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Driving Regulatory Success And Strengthening Risk Management: The Benefits of Connecting Internal Controls

What if you could transform audit data into a competitive advantage? While you may have access to a wealth of data, you may be leaving valuable insights buried beneath the surface. For many teams, the root cause of ineffective audit analytics programs is due to a lack of strategy. Simply buying tools and hiring a data analyst is rarely enough. But a well-designed audit strategy — one that’s powered by advanced analytics and AI — could yield unprecedented risk coverage and advisory value. In this session, we'll identify the critical elements needed to design an internal audit data strategy that drives impact.

What you will gain from this webinar:
- Understanding of the number one reason data strategies fail.
- Ability to identify the key components of an effective data strategy for Internal Audit departments.
- Understanding of how to measure the impact of your data strategy.


    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

How to Build Your Analytics and AI Strategy

In today’s digital-first environment, getting compliance and vendor management right is crucial to achieving strategic business objectives. Managing the scale and complexity of modern IT compliance and risk management requires the right tools and strategy.

Join AuditBoard’s industry experts as we share learnings and best practices on how to leverage our IT compliance, third-party, and IT risk management solutions to defend and strengthen your business.

In this product walkthrough, we’ll cover:
- How to build and scale a multi-framework IT risk and compliance program for your business.
- How to understand your threat landscape, quantify risks, and improve cyber resilience.
- How to streamline vendor evaluation and onboarding as well as visualize and assess your vendor programs to mitigate third-party risks.
- What’s new with AuditBoard.



*CPEs not offered for this product walkthrough.

AuditBoard Demo: IT Compliance and Risk Management

The dust has begun to settle on another successful RSA Conference where SANS continued its 15-year tradition of highlighting some of the year's most concerning emerging threats.

This year’s Top New Attacks & Threats Report and virtual event will take a deeper dive into the emerging threats discussed during the annual SANS keynote at RSA Conference and look at numerous other noteworthy attacker trends. SANS Certified Instructor and event chair, Lee Crognale will provide mitigation strategies and actionable advice on the critical skills, processes, and controls needed to protect enterprises from these advanced attacks.

Topics include:
- The Security Cost of Technical Debt
- Verifying Identity in the Age of AI
- LLMs Hyper-Accelerate the Exploitation Lifecycle
- The Use of AI to Defeat Novel Malware
- The Organizational Risks associated with Generative AI
- Developing Detection Mechanisms for Detecting Deepfakes & Gaining Digital Trust.

SANS 2024 Top Attacks and Threats Report

Last year, AI broke into the mainstream and business use cases with the advent of generative AI and large language algorithms (LLMs). IDC predicts that AI spending will continue to accelerate to over $301 billion globally by 2026. 

Despite all the buzz, a recent Gartner survey reveals that over half of organizations don’t have an internal policy on generative AI — opening them up to potential ethical, legal, and privacy risks.

This session will discuss the challenges organizations face as a result of AI’s rapid adoption and offer guidance on how to develop policies for responsible use and minimize risks.

From this session, you'll be able to:
 - Describe how enterprises are currently leveraging AI in business contexts.
 - Discuss risks and challenges associated with AI adoption.
 - Develop a comprehensive AI usage policy that enables innovation while mitigating risks.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

AI Goes Mainstream: What Enterprises Need to Know

Since The IIA introduced new global internal audit standards in January 2024, there's been much discussion about these standards, their changes, and internal audit's compliance plans. In this AuditBoard webinar, we'll share perspectives from the front line on how internal audit teams of all sizes are strategizing and taking action to conform to these new standards. You’ll hear how audit leaders are building support from key internal stakeholders and we’ll help you identify areas where continuous improvement or change is needed to adapt in 2025.

From this webinar, you'll be able to:
 - Gather perspectives on internal audit teams' plans to comply with the new IIA standards.
 - Understand the perceived and actual gaps that internal audit teams might have, along with action plans to achieve the desired state of conformance.
 - Identify areas within the IIA’s standards that can inspire improvements to internal audit's methodology.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Front Line Perspectives on Adhering to The IIA's New Global IA Standards

None of us are as ethical as we think we are. 
 
All evidence points to the fact our society is not getting any better ethically. The number and variety of recent scandals proves our culture has changed in the last half-century to one with a greater emphasis on self, ignoring or rationalizing any unethical behavior involved in our decision-making or actions. You might say you are ethical and perhaps that everyone at your organization is as well. It’s time to see if you and the leaders at your organization are truly walking the talk.

From this webinar, you'll be able to: 
 - Identify The Big Me character choice in real-life fraud, ethics, and audit cases.
 - Recognize blind spots that exist and why they lead to being The Ethical Rationalizer.
 - Select personal values and create an ethical mantra to become The Everyday Ethical Auditor.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Say Something, Even If: Becoming the Everyday Ethical Auditor

The SEC's final rule on Climate-Related Disclosures marks a significant step toward corporate transparency, reflecting the demand for more consistent, comparable, and reliable climate risk reporting. As climate-related disclosures become mandatory, comprehensive carbon accounting technology within a robust risk management framework is crucial for compliance, highlighting the importance of audit-ready carbon metrics in broader Environmental, Social, and Governance (ESG) program management.

This webinar delves into the recent developments in ESG regulations, including the SEC Climate Disclosure Rule, California’s Climate Accountability Package (SB-253 and SB-261), the International Sustainability Standards Board (ISSB), and the Corporate Sustainability Reporting Directive (CSRD).

Explore the scope and applicability of these regulations, providing guidance on prioritizing compliance efforts and emphasizing the importance of interconnected internal controls to enhance data quality. This is particularly crucial for companies gearing up for ESG assurance processes. Experts from Persefoni will lead an in-depth discussion on GHG disclosure requirements.
What you'll gain from this webinar: 
 - Navigate the intricate ESG regulatory landscape and align organizations with emerging frameworks, standards, and regulations.
 - Discuss the collaborative approach essential for success, highlighting the synergy required among internal audit, finance, risk, and sustainability teams.
 - Use effective strategies for collecting the right data, identifying key emissions sources, and mastering climate risk data management to ensure reporting compliance.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Navigating ESG Regulations: Strategies and Insights for Climate Risk Reporting

As we come up on almost one year after the regulations were announced, companies are still struggling to implement best practices for their cybersecurity programs. This webinar will discuss the top challenges companies are experiencing (i.e., determining materiality, disclosing in the right amount of time, ownership for remediation activities), and how to build out a robust program to manage the requirements and overcome these challenges.

At the end of this session, attendees will be able to:
 - Describe the impact to their business as a result of the new SEC cybersecurity disclosure ruling and resulting process changes.
 - Implement a strategic approach to help standardize processes across teams.
 - Prioritize the right technology to help them comply with the ruling.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Decoding the New SEC Cybersecurity Ruling

With the passage of the EU’s AI Act — which has been likened to the GDPR for artificial intelligence —  it is essential for businesses to address the impact of AI on their future strategies and operational frameworks. Internal auditors must understand the effects of such rapid technological advancement on their companies’ risk landscape – as well as the potential opportunities cutting-edge technology presents  for enhancing audit processes. Balancing AI’s potential as a key catalyst for growth with the growing risks these technologies bring will require internal audit to step into a leadership role in helping their businesses prepare for compliance with the new and evolving AI regulations.

In this webinar, you will learn from industry experts how to put safeguards in place, including:
 - An overview of the EU’s AI Act, and internal audit’s role in preparing for compliance
 - Guidance to follow in assessing the risks of internal AI technology
 - Procedures to consider the alignment of AI application with a company’s broader business strategy
 - Testing of management controls to mitigate the risks of potential errors or inaccuracies associated with AI technology

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Is Your Business Prepared for the EU AI Act: Internal Audit’s Critical Role

Return to work, the great resignation, quiet quitting, agile resourcing, upskilling — there is no shortage of talent themes and buzzwords keeping people leaders and HR business partners on their toes. These challenges impact how companies operate, how audit engagements are executed, and how audit plans are completed. Audit leaders are uniquely positioned to build engagement to create high-performing teams. While these teams may not be immune to the next "big thing", genuine trust, coaching, inclusion, and care will differentiate high-impact audit, risk, and compliance functions. In this session, audit leaders will share the strategies that have worked well for them in this area (and what hasn’t worked as well).

From this session, learn to:
- Develop your teams to build engagement and connectedness.
- Create inclusion across country lines.
- Develop employees that benefit the company after their role in audit. 
- Adapt different skill sets to be nimble in a challenging talent environment.

    * CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Engaging an Inspired Audit Team

IT security doesn't have to be scary. You can do many controls-based reviews without deep expertise. In this session, you will come along on a real-life journey of how Virginia Tech's internal audit team uses several common IT security frameworks to conduct a basic and intermediate-level security controls review of endpoints, servers, and applications. We will focus on the practical and share the pitfalls we've learned along the way with the goal of providing as many resources as possible to help ensure your success.

CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Using a Framework to Guide an IT Security Review

IT Security

Compliance

Audit

Internal Audit

Cyber Security

IT Compliance

Application Management

Cyber Defence

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Get powerful emerging technology insights from influential experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on technologies like 3D printing, pervasive robotics, natural interfaces, connected everything and cognitive systems.

Emerging Technologies

The research and development community on BrightTALK brings together leading professionals in healthcare, technology and manufacturing to present on current topics in their fields. From big data in healthcare to online forensics training and medical research practices, the community is an exceptional resource for those looking to expand their knowledge. Be part of the conversation by joining the community and participating in interactive live webinars.

Research and Development

Internal audit and compliance professionals are facing increasingly stringent regulatory requirements when it comes to compliance reporting and internal control procedures. Join the audit and compliance community to learn best practices from thought leaders on topics such as regulatory compliance, internal audit checklists and audit program strategies.

Audit and Compliance

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

Finance

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

Using a Framework to Guide an IT Security Review

Presented by

About this talk

More from this channel