Name: Managing Multiple Frameworks Through Common Controls and Compliance as Code
Start: 2023-01-25T18:00:00Z
End: 2023-01-25T19:03:48.000Z
Location: BrightTALK
Rating: 0

AuditBoard transforms how audit, risk, and compliance professionals manage today’s dynamic risk landscape with a modern, connected platform that engages the front lines, surfaces the risks that matter, and drives better strategic decision-making. More than 35% of the Fortune 500 leverage AuditBoard to move their businesses forward with greater clarity and agility. AuditBoard is top-rated by customers on G2 and Gartner Peer Insights, and was recently ranked as one of the 100 fastest-growing technology companies in North America by Deloitte. 


Digital transformation — largely accelerated by the 2020’s shift to remote work models — altered business operations from a visible set of centrally managed technology assets to a highly distributed, often opaque set of digitally-enabled processes, products, and services. Traditional InfoSec approaches have become fragmented, labor-intensive, and largely insulated from the business at large, an AuditBoard flash poll of information security professionals. 

Watch this webinar from the recent ISACA Virtual Summit, "Building an Effective Risk Management Program" to explore the key security trends driving a new way of managing security operations better suited for the digital age.

CPE: This is a session recording. Credits are not offered for on-demand viewing by AuditBoard or ISACA.

ISACA Virtual Summit Session: Managing Security in the Digital Age

There’s no question that frameworks need to stay relevant with current and emerging threats so organizations can conduct assessments as efficiently as possible and provide practical, yet meaningful, assurances to stakeholders. NIST CSF is a strong base because it’s so practical — so how can companies leverage it to its fullest potential? This session will explore how organizations can get the most value from NIST, including best practices for reporting to the board and investors.

CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Leveraging NIST to Its Fullest Potential

Cyber breaches and resulting costs reached all-time highs in 2022, with an over 42% global increase in attacks. Organizations want to better prepare for and defend against cyber attacks, but they’re not getting the information they need to do it. Despite the lack of a federal mandate for open disclosure of data breaches and other cyber attacks, the U.S. government is working on solutions. The Cybersecurity & Infrastructure Security Agency (CISA), Cyber Safety Review Board (CSRB), Securities and Exchange Commission (SEC), and Senate are each working to establish guidance and disclosure protocols for preventing and responding to cybersecurity incidents. The Senate’s proposed Securing Open-Source Software Act of 2022 (SOSSA) is a step in the right direction, but the legislation doesn’t go far enough. During this session, John Wheeler will offer context, break down the legislation and its limitations, and share insights on what’s coming in 2023.

CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Cybersecurity Disclosures: What’s Coming in 2023

Researchers recently debuted ChatGPT, a prototype conversational AI chatbot that can sometimes appear to be human. This means added complexity for security professionals, since many security tools use attackers' poor command of English to detect and block phishing attacks. Can we expect criminals to soon use tools such as ChatGPT to write lures that seem to have been crafted by a native speaker? Is AI a friend or foe to security? During this panel discussion, a group of security professionals will share their viewpoints on AI and how they see  it impacting the future.

CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Artificial Intelligence, Friend or Foe?

Enterprise sized challenges require the best minds to tackle them. Watch our experts dive into a walkthrough of the AuditBoard CrossComply product.

By attending this session, you will learn:
- How to navigate our platform and improve company compliance
- How to streamline framework communication for a faster, easier experience
- How to create tasks and reporting to easily collaborate across departments

AuditBoard CrossComply Live Demo

Cybersecurity is one of the most critical issues facing information security and risk management professionals. But, are your systems up to the challenge and are you in compliance with rules being enforced in the US and abroad? The European Union’s General Data Protection Regulation changed the way many companies manage data privacy. California has taken the lead in the states, but will your company be ready if a uniform data security law arises in the US or if more states implement their own rules?

This webinar will delve into how companies should approach compliance management and what processes, assets and risks should be assessed. Attendees will leave the session with a clear picture of what cybersecurity compliance means and why it is vital for companies of all sizes to have a cybersecurity compliance program.

Cybersecurity: Are you in compliance?

Every enterprise has hundreds if not thousands of third-party relationships – vendors, partners, clients – that they rely on for products and services. Unfortunately, these relationships inherently introduce risk to the organization. IDC research has found that third-party risk is among the top concerns for IT and business leaders. What’s more, the frequency and severity of third-party breaches are on the rise. 

Join us as experts from AuditBoard and IDC explore the issues around managing risk and compliance in third-party relationships, including the use of third-party risk management platforms.

How to Manage Risk & Compliance in Third-Party Relationships

After three years of unprecedented disruption, internal auditors are ready to put risk bedlam in the rearview mirror. But 2023 is promising more of the same. Join Richard Chambers for his first AuditBoard webinar of 2023 where the focus will be on the key lessons learned in the past year, vital strategic risks internal auditors face in the year ahead, and five New Year’s resolutions to which every internal auditor should commit.

CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

It’s 2023! Five Internal Auditor Resolutions for the Year Ahead

Who has access to your company’s data and what risks do they pose to your organization? While these questions seem basic, most organizations cannot confidently answer them, despite an accelerating trend of third-party threats and incidents. Building a robust third-party risk program is complex and takes time. Building a program that allows information security teams to be strategic in managing third-party risks is even more challenging. During this session, AuditBoard’s Information Security team will guide you through how they successfully transitioned to a strategic and technology-enabled third-party risk program to manage this emerging source of risk.

CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Taking a Strategic Approach to Your Third-Party Risk Management Program

The global pandemic, economic uncertainties, and new technologies are changing how, why, and where people work. Compounding these challenges is a sociocultural shift that will heavily impact company strategy and growth plans: the arrival of a new generation in the workforce. What will it take to attract and retain this new and ambitious cohort of thinkers, doers, and entrepreneurs who reject the notion of “how things have always been done”? In this session, we will discuss who this new generation of the workforce is; how this group of individuals is driving change in audit, risk, and compliance functions; and what businesses can do today to prepare to meet their needs and expectations.

CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

The Advantage of a Multigenerational Disrupted Workforce

Companies around the globe are grappling with a myriad of business-critical risks such as supply chain disruption, staffing shortages, and increasing cyber threats — just to name a few. As the temptations and opportunities for fraud have increased, fraudsters have taken advantage of the situation by using ever more sophisticated tools to commit their crimes. This rising risk makes it imperative that companies and internal audit functions stay vigilant when it comes to defending against fraud.

CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Tackling Fraud in Today’s Dynamic Risk Environment

Management and boards are pushing to do more with less and as a result are turning to third parties to stay competitive. This strategy, however, comes with risk. Third parties introduce a host of risks including cyber, privacy, resiliency, digital, brand, and regulatory. Leading organizations must be able to transform uncertainty into confidence by developing trust with third parties. To holistically manage third-party risks, it is critical to establish foundational components of a TPRM program and embed TPRM activities throughout the third-party management lifecycle. Learn how organizations are operationalizing their third-party risk programs leveraging a data-driven approach and emerging capabilities. 

CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Emerging Third-Party Risk Trends Beyond the CISO Office

The advancement of technology in recent years has provided immense opportunities for the internal audit profession to pursue innovation and transformation activities. Technology has become more accessible with the democratization of tools that were previously available to only a select few. Internal audit is uniquely positioned to benefit by taking advantage of enabling technologies to better deliver their functional work and to support the organization as a strategic business partner. Learn how internal audit can embrace emerging technology and drive innovation and transformation for an organization.

CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Emerging Technologies in Internal Audit

The accelerating change of pace in both society and the climate is sharpening stakeholder focus on environmental, social, and governance (ESG) risks facing many organizations today. As auditors, we’re uniquely positioned to act as catalysts for furthering an organization’s ESG goals while helping to identify potential obstacles. In this session, you’ll learn what auditors really need to know about ESG, including:

- The changing ESG regulatory environment.
- Implementing an ESG program and how internal audit can assist.
- Design and testing considerations for ESG internal controls.
- Example ESG disclosures.

CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

ESG: What Internal Auditors Need to Know

Increasing expectations from stakeholders like consumers, investors, and regulatory entities make ESG program management and reporting a critical component of your audit, risk, and compliance programs. While audit, risk, compliance, and sustainability professionals have a pivotal role to play in helping organizations to navigate these challenges, they face obstacles in obtaining accurate, complete, and timely data from stakeholders across the business for whom ESG reporting is a distraction from their day-to-day duties. It also may not be clear how to build advocacy with these stakeholders and the business leaders whose backing they need to ensure programs succeed. 

Learn how organizations are tackling ESG program management today with tips, best practices, and resources that will help to answer your questions about why activities matter, what their benefits are, how to navigate through key considerations and common pitfalls, and — most importantly — how to roll out an ESG program that can mature with your organization and put you on a path toward long-term value creation.

CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Step-by-Step Guide to Building Your ESG Program

Based on the findings of a recent survey report from the Internal Audit Foundation and AuditBoard, this webinar will assess the impact of remote work in the internal audit profession, explore the importance of technology in addressing remote work challenges, and share best practices for remote working and sustaining a positive virtual work environment.

CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

The Remote Auditor: Challenges, Opportunities, and New Ways of Working

Third-party risk management; environmental, social and governance risk; risk quantification: They are all critical topics as we approach 2023. In this video interview, Richard Marcus of AuditBoard explains the significance of these areas and how security leaders should approach them strategically.

Topics include:
- Top threats and priorities for 2023;
- Who needs to be involved in assessing risk;
- Best practices for building rapport with senior leaders and the board.

CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

TPRM, ESG, Risk Quantification: What CISOs Need to Know

This session will cover how to use compliance as code to achieve common controls across multiple frameworks in complex environments. Join Dorian Cougias, co-founder of Unified Compliance Framework (UCF), and Richard Marcus, AuditBoard’s Head of Information Security, to gain insight into the technology-enabled approaches that forward-thinking compliance professionals are using to keep pace with the rapidly evolving compliance landscape. Participants will learn how to reimagine their processes and leverage UCF and AuditBoard to establish compliance as code and aggregate, harmonize, and automate compliance activities.

CPE: This is a webinar recording. Credits are not offered for on-demand viewing.

Managing Multiple Frameworks Through Common Controls and Compliance as Code

Compliance

Compliance Testing

compliance framework

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Get powerful emerging technology insights from influential experts. Connect with thought leaders and colleagues to get the most up-to-date knowledge on technologies like 3D printing, pervasive robotics, natural interfaces, connected everything and cognitive systems.

Emerging Technologies

The research and development community on BrightTALK brings together leading professionals in healthcare, technology and manufacturing to present on current topics in their fields. From big data in healthcare to online forensics training and medical research practices, the community is an exceptional resource for those looking to expand their knowledge. Be part of the conversation by joining the community and participating in interactive live webinars.

Research and Development

Internal audit and compliance professionals are facing increasingly stringent regulatory requirements when it comes to compliance reporting and internal control procedures. Join the audit and compliance community to learn best practices from thought leaders on topics such as regulatory compliance, internal audit checklists and audit program strategies.

Audit and Compliance

Effective financial management strategies can help organizations meet their business objectives. The financial management community on BrightTALK is made up of engaged finance and accounting professionals. Find relevant webinars and roundtable discussions featuring financial planning advice from industry thought leaders and insights into optimizing financial reporting, accounting, risk management and value measurement.

Financial Regulation

The accounting and finance community on BrightTALK features presentations from leading accountants and finance professionals. The accounting community includes tax planning strategies, QuickBooks webinars and other accounting webinars, while the finance community features presentations on financial capital regulations and forensic data analytics. Join the conversation by attending live financial and accounting presentations and connecting with industry thought leaders.

Finance

Get powerful insights to run your business. CEOs, CFOs, CMOs, COOs, CTOs and CIOs are among the leaders in this community who connect with peers and experts to grow their businesses.

CxO Strategy

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

Managing Multiple Frameworks Through Common Controls and Compliance as Code

Presented by

About this talk

More from this channel