NACD – Monarch Information Networks

Enterprise Risk Management and Information Security

By Frederick Scholl | September 5, 2016 |

Enterprise Risk Management (ERM) has been around at least since the days of the Trojan Horse. Information security risk management can learn much from ERM and avoid reinventing the wheel. The National Association of Corporate Directors (NACD) made this clear in the 2014 handbook Cyber-Risk Oversight. Principle #1 is to approach cybersecurity as an enterprise-wide risk…