NAISG Seattle Compliance Presentation
January 29, 2009
Jon Espenschied presented “The Cutting Edge of Compliance: An Anecdotal View” to the Seattle chapter of the National Information Security Group on 22 January 2009. Click to view the presentation (22 slides) or download the pdf. Jon’s presentation covered how business and operational pressures are changing the way professionals interpret compliance requirements. Within the triad of Governance, Risk Management and Compliance (GRC), compliance has been treated as a separate activity by most, a foundational task to be taken care of before evaluating and controlling risk. As pressure builds, however, more are consciously evaluating risks from noncompliance, and more normative organizations — not just the corrupt or incompetent — are choosing to accept certain noncompliance risks that were previously unacceptable.
Comments
Got something to say?