Christina Slade, CFE的动态

?? ?? ?????????? ?????????? ???? ?????????????????? ???? ???????? ?????????? ?????????????????? ???????? ????????????! What do you think of when you think about the role of a Chief Risk Officer? What about the CFO? COO? Probably some of those folks are naturally more sceptical. Always questioning and identifying potential pitfals. Maybe the finance officer guards the company's wallet with an eagle eye always prioritizing cost-efficiency and stability. ?????? ???????? ?????????? ?? ????????? Well I guess the CISO role demands faaaar more than technical knowledge. As a CISO you should embody vigilance, strategic thinking, and foremost the ability to anticipate and navigate through rough area with constant evolving threats. You should be ?????? ?????????????? of security woven in to the company's fabric. ?? And yes, I am convinced that a boards effectiveness hinges on the ?????????????????????????? ???? ????? ????????. Its those specific traits that push the board to challenge, defend, and lead each of their domains. So I guess its more about who they are not about what they know, right? #informationsecurity #management #itgovernance #isms #corporategovernance

The DoD does not have a compliance problem. It has a management problem. It's success depends on the ability of a decision maker closest to a problem to act quickly. This is diametrically opposed to top-down compliance structures meant to "assess risk to the enterprise". Riddle me this, which enterprise? There are many. At which level are you optimizing decision making? Are you willing to rely on "advisory boards" who do not have day to day knowledge of your system of systems to make or break your operation? Wars don't move in months. Time lost is opportunity lost. You can't prosecute a war with consultants and SIEM voyeurs. You can't foster innovation through people who haven't built anything before. No, "managing" a team doesn't count. You need people who know how the work gets done. This doesn't mean you allow everything. It means you encourage freedom of decision, but hold decision makers accountable for results. Dictating results means no responsibility and no innovation. It's boxchecking, not ownership. I have too many people thinking about the paperwork, not the solutions they're responsible for building. We are rapidly becoming a country where people spend more effort complying than accomplishing. Why worry about who will be fighting us when we're too busy fighting ourselves? #DoDCIO #cargocult

We had an interesting conversation in the most recent LDR433 Human Risk course last week on how to effectively manage human risk. It was one on mandating. Why should security teams not simply mandate what needs to be done? Why spend all this time and emphasis on positive engagement, clear communications and even a customer service focus when we could simply tell people what they have to do and enforce that? Intuitively I think we all 'feel' that mandating is a far more harmful approach, but how would you articulate it? Lots of great answers in the class, but curious how you folks would explain the advantages / disadvantages of each approach. SANS Security Leadership #securityawareness #securityculture #humanrisk

We all know that law enforcement is a dangerous profession. I’m continually amazed by the brave men and women who put themselves at risk to protect our communities. While some dangers are completely out of our control, we have the ability to foresee and manage some of them. Managing risk is not always easy especially when the stakes are so high. And managing risk is not always popular especially when it means telling hardworking employees that they can’t do something. But managing RISK VERSUS REWARD is a critical part of any leader’s job. Sometimes it means creating policies that restrict risky behavior. Sometimes it means telling people to abandon a certain task. But sometimes it means telling a group of people to go into harm’s way in order to get the job done. Whether you’re directing people to act or not act, there’s always risk involved. Leaders need to be confident in their skillset, comfortable making tough decisions, and humble enough to admit when they get things wrong. #leadership #humility #riskmanagement #risk

Compliance professionals often face the choice between letting SHTF or stepping in to save the day. The truth is, compliance practitioners have a unique opportunity to be proactive leaders in their organizations. By calmly explaining the importance of compliance and offering support, they do so much more than prevent chaos. They empower others to make smarter, informed decisions. Building trust and creating a broader culture of accountability throughout the entire company. The power of compliance lies in guiding others towards a better way of doing things. They're the difference between confusion and clarity, between risk and resilience. They have the ability to make a positive, lasting impact—and that’s worth stepping up for every time. So, take a moment to thank your compliance team more often. They’re the ones preventing the chaos you might never even see. #ComplianceMatters #Compliance #Risk

Working in countries with unstable political situations and high corruption scores presents unique challenges in managing compliance and fraud risks. At our organization, we take these challenges seriously, conducting regular risk assessments and tailoring specific policies to effectively mitigate these risks. Our management team is deeply committed to preventing bribery and fostering a culture where unethical practices are simply not acceptable. Through comprehensive training programs and open communication, we ensure that our employees understand the importance of compliance and the impact of their actions. As Victor Hugo wisely said, “He who opens a school door, closes a prison.” This quote resonates with me because it underscores the power of knowledge and training. Even a single oversight by an untrained employee can lead to significant compliance issues, resulting in loss of productivity, penalties, and business disruption. Donatella Farese,our Compliance officer, shares her insights on navigating compliance challenges in complex environments. Read what else she has to say about her experiences and strategies for effectively managing risks.?? #Compliance #RiskManagement #Leadership #CorporateGovernance #FraudPrevention #Training #BusinessEthics #Integrity #ComplianceCulture #KnowledgeSharing #CorporateResponsibility #RAGroupPLC #RAInternational #DeliverRegardless

Believing that a risk can materialize is the second step in effectively managing it. According to the family, the CEO of United Healthcare had recently received death threats. This indicates that the risk had already been identified (the first step in risk management). While I extend my condolences to the family of Brian Thompson, I also hope that organizations will enhance their risk management culture in all aspects—not just regulatory compliance. #ACAMS #ALCO #ACFE

Proud to be working with Donatella Farese, our Compliance Officer, as she shares her experiences and strategies for navigating compliance challenges in complex environments. Her perspective on risk management and the importance of training is invaluable. Check it out and learn how we’re fostering a strong compliance culture at RA! #Compliance #RiskManagement #Leadership #Training #CorporateGovernance

?? GRC leaders have a super tough job. I've felt the crushing pressure of the role and the monotony that leads to burnout. Talking to Corporate Counsel about contract risk, to Marketing about data privacy, and to Internal Audit about a SOX deficiency - in the same day - was typical. Add to that leading response and coordination for a security incident, or supporting a sensitive eDiscovery or forensic investigation - again, a typical day. Adding to the pressure that many in Security & GRC feel that they always have to be right. "You can be right 99 times, but the adversary only has to be right once." And with that pressure can come the monotony of things remaining the same, and doing work that feels less meaningful. If you've ever felt this way, here are 3 brief ideas that I've found helpful...and they're all from Seth Godin ??. 1 // "Find the others." - find more people like you, doing things like you. Gather the risk people from all around your organization to talk, share, and learn. 2 // Be a Purple Cow - look for unconventional ways to make 1% gains, borrow ideas and moves from other professional disciplines, experiment, and take risks. 3 // Don't surrender your agency - "don't revert to the numbing day-to-day grind of compliance; you can make things better." Everything is practice and every attempt counts. Above all, keep going. ?? #grc #riskmanagement #teams #leadership #leadershipcoaching