Everything tagged risk-management, newest first. Tags come from the classifier reading each item's summary; 394 tags used 25 times or more have their own page.
Knight Capital’s 2012 collapse shows how a reused feature flag, inconsistent server deployment, and a mistaken rollback turned one dormant trading function into a catastrophic software bug that executed millions of bad trades in 45 minutes, costing the firm $440 million and leading to its sale.
Organizations must adapt to rapid market changes by leveraging time as a competitive advantage, moving at unprecedented speeds, and managing increased risks to remain competitive in the evolving global landscape.
A semantic layer serves as a practical risk mitigation strategy by addressing operational risks that subtly impact organizations daily, rather than focusing solely on compliance frameworks.
Tesla has reportedly prepared contingency plans in case of a potential invasion of Taiwan by Beijing.
Aon has expanded its Data Center Lifecycle Insurance Program to $5 billion, enhancing risk management services for data center development and operation.
The conversation highlights the importance of designing AI systems with risk-informed architecture and governance to ensure meaningful oversight and understanding, rather than relying solely on data without context and relationships.
The ISO 42001 standard provides a comprehensive AI management system for organizations to govern AI risk through a continuous improvement cycle, addressing issues like data bias, model accuracy, and system security.
Despite the sharp rise in vulnerability disclosures due to AI-driven discovery, actual risk isn't increasing, making swift identification and action on significant threats crucial for success.
Designing contract-bound AI agents involves creating systems that can execute high-stakes tasks reliably and ethically, ensuring compliance with predefined agreements and minimizing risks.
AI-assisted coding has transformed software development by increasing code volume and speed, necessitating a proactive, integrated approach to risk management that embeds security intelligence directly into the development workflow.
Organizations face a growing challenge as software adoption increases while trust in these technologies declines, impacting financial decisions on software investments.
Network automation offers benefits like speed and efficiency, but implementing it in existing systems requires careful, gradual approaches to manage risks effectively.
Rich Mogull discusses the integration of AI into production environments, highlighting its potential impacts on uptime, operations, security, and risk management.
Insider threats are a significant concern for technology executives, with 83% of organizations experiencing such attacks in 2024, exacerbated by AI and deepfake technologies.
Internet security risks remain a persistent and costly challenge, with key insights from top security posts highlighting strategies and trends for 2025.
The most significant impact of the reductions will be felt in back-office operations, risk management, and compliance sectors.
The cloud, while offering enhanced security and reliability compared to personal computers, centralizes failures, creating larger-scale risks and dependencies, challenging the notion that it is inherently safer.
Anthropic's CEO discussed the economics of AI, criticizing competitors for reckless spending, likening their approach to "YOLO-ing."
Several major insurers are seeking regulatory approval to exclude AI-related liabilities from corporate policies, citing the unpredictable nature of AI models as a significant concern.
The Internet-driven economy has led to unbounded Nth-party risks across public clouds, SaaS, and supply chains, impacting businesses through complex supplier networks.
Security teams should enable calculated risk-taking by guiding users on safe practices rather than outright denying new technologies, as prohibitions often lead to unmonitored and insecure workarounds.
Akili Akridge, a former Baltimore cop turned mobile security expert, discusses mobile threats and strategies for CISOs to manage risks in mobile environments.
The corporate travel management company is advancing with its plans under SEC rules that permit companies in IPO limbo to continue at their own risk during the shutdown.
Cross-disciplinary collaboration enhances decision-making and improves outcomes during disruptions by integrating diverse perspectives and expertise.
Small businesses can enhance client data security by implementing best practices focused on compliance and risk management to protect sensitive information effectively.
AI's potential is vast, but it poses risks that can be mitigated through robust governance and security policies, addressing both compliance and vulnerability concerns.
A global disruption on July 19, 2024, caused by a faulty automated security update, highlighted vulnerabilities across various industries, impacting sectors from airlines to healthcare.
Data centre construction is increasingly prioritized globally due to rising cloud service reliance, recognized as critical infrastructure in the UK, with high demand and competitive markets, yet faces significant risk challenges.
Invicti has launched its next-generation Application Security Platform, which includes AI-powered scanning, improved DAST performance, and comprehensive application risk visibility to help organizations detect and fix vulnerabilities more efficiently.
AI has the potential to enhance community notes significantly, but it also introduces clear risks that need careful consideration.
Quantum computing is revolutionizing computing by solving complex problems beyond encryption, potentially disrupting blockchain, and necessitating new risk considerations.
The Google Cloud cyber security certificate program offers expert-led instruction and hands-on labs to prepare individuals for entry-level cloud security roles, focusing on analyzing vulnerabilities, building defenses, and safeguarding systems.
The Packet Protector podcast discusses Kubernetes environment risks, mitigation strategies, and the benefits of using established technologies with guest Natalie Somersall, Principal Solutions Engineer at Chainguard.
A survey by VDC Research and Kaspersky reveals that 7% of industrial organizations only address vulnerabilities when necessary, risking unplanned downtime and financial and reputational damage.
Despite recognizing AI as a significant threat, nearly a third of UK businesses are unprepared to manage AI-related risks, according to CyXcel's research.
AI is now integral to business operations, introducing new risks that Palo Alto Networks addresses through its Prisma AIRS and Prisma Access Browser solutions.
IT and infosec professionals must extend their expertise to include operational technology (OT) risks, such as those in industrial environments, to ensure comprehensive security.
President Trump rescinded a 2023 executive order by President Biden aimed at mitigating AI risks to consumers, workers, and national security.
AI implementation poses a dilemma for companies between potential productivity gains and significant risks, prompting the rise of "security for AI" startups to mitigate these challenges.
SOC teams can enhance efficiency and minimize breach risks by adapting operations with Cloudflare's comprehensive user-based risk management approach.
A Chief Information Security Officer (CISO) is crucial for developing security strategies, requiring technical expertise, business insight, and strong communication skills to align executives and technical teams.
Stoïk offers a cyber insurance product tailored for small businesses to transfer cyber risks to a third party.
In 2024, the focus will be on integrating generative AI with traditional AI, emphasizing governance through risk management, compliance, and lifecycle governance.
Achieving ISO/IEC 27001:2022 certification involves a systematic approach to establishing, implementing, maintaining, and continually improving information security management systems.
Netos integrates with NetBox to enhance network financial forecasting and risk management capabilities for existing installations.
Experts discuss AI advancements, focusing on multi-agent systems, personalization through LLMs, and the latest model releases.
Discussing security objectives in business terms helps align them with organizational goals, enhancing budget support and executive trust.
The Tech Bytes podcast discusses managing IoT and OTT device vulnerabilities with Palo Alto Networks' machine learning-based solutions.
Thomas Pace advocates for the importance of Software Bill of Materials (SBOM) in IT infrastructure to enhance software transparency and risk management.
