The latest information for media, analysts, and others interested in the CMMI® Institute and process improvement.
A recent Forrester report has identified that, in the last two years, more funding from security budgets has been dedicated to obtaining services over products. Further research supports that one of the main causes for the increase in service spending is lack of trained professionals and the ability to establish a proper framework in which to perform risk management. This trend may continue to grow as organizations scramble to address their deficiencies.
The cyber domain is a scary, yet necessary place for organizations and business to operate. Though threats lurk in every corner, security leaders can ensure that they are appropriately armored. Understanding that cybersecurity risk assessments and maturity measurements, not just simple compliance, are the piece of armor to which all other efforts connect will help organizations prepare for the eventual attacks they will face.
CISOs can benefit from thinking like successful venture capitalists. VCs are not looking at what has already happened in the market; they are trying to look ahead and anticipate what will come next.
Stop fighting the last battle instead of anticipating the ever-evolving cybersecurity threats most likely to come at them going forward.
What are the key organizational behaviors that support building a situationally aware, cyber-resilient culture?
What does it mean to be uncomfortable? It’s the hallmark of a forward-leaning culture of cybersecurity. It means habitually questioning, challenging and pushing your organization.
Compliance is only very good at solving one problem: compliance risk. Beyond that, it is informative but not very helpful when it comes to mitigating enterprise cybersecurity risk.
In today’s dynamic business environment, supply chains are more than just global and complex; they’re also continuously changing.
Successfully managing big services contracts is a juggling act. Make missteps and the jubilation over landing a big contract can quickly turn sour as the project degenerates into a money-losing nightmare.
Some performance-improvement challenges are universal, but each business is unique, with its own specific performance objectives—and obstacles.
Simply working with an agile coach to implement well-known ceremonies is not enough. Metaphorically, the leadership “operating system” needs an upgrade.
Five top challenges facing the realm of cybersecurity
This article includes an effective diagram that shows how cyber-risk management involves all parts of the organization.
How do you ensure alignment around your organization’s security needs and consistently build the capabilities needed to address the biggest risks?
The goal is to build cyber resilience: the ability not only to detect and block the threats that matter, but also to survive the attacks that prove unavoidable.
Understanding how to build organizational resilience is vital to deepening board confidence and support.
Even at the best-run companies, executives suffer sleepless nights wrestling with business performance issues. Oftentimes, the root cause is buried deep within their processes, or lack thereof.
2/3 of organizations that implemented a cybersecurity culture with employee buy-in said they reduced cyber incidents as a result.
Cybercrime is rising exponentially. And, taking a cold, hard, continual look at your organization’s capabilities is becoming a mission-critical imperative.
A data quality pilot project is a powerful opportunity for rapid capability building that can create lasting value for an organization.
Compliance is important, but it should be the natural by-product of a strong cybersecurity strategy, not the goal.
Bring structure and control to the chaotic and unpredicatable cybersecurity environment.
As high-profile breaches continue to hit the headlines, cybersecurity risk assessment remains a top concern for corporate boards.
In order to truly build cybersecurity resilience, organizations must continually evaluate their risks and capabilities.
Explore the organizational activities and changes that will give enterprise data management programs the best chance for success.
Data management programs can be hard to sell internally. How can you demonstrate the strategic value of data assets to leadership?
Patient demographic data quality issues are pervasive across the healthcare industry. The new Patient Demographic Data Quality provides the roadmap to improvement.