White Papers in Governance & Risk Management

Sponsored by Netskope

Netskope + Illumio: North, South, East, West—Securing Your Network with Zero Trust

Learn how to implement a comprehensive zero-trust strategy with Netskope ZTNA and Illumio ZTS to enhance your organization's security posture.

Integrating the NIST CSF into Third-Party Risk Management: Strategies for Enhanced Security and Compliance

Third-party risk management (TPRM) professionals evaluate service providers from a range of industries and geographies, meaning many of the third parties they work with operate based on different regulatory standards, often with hugely varied access permissions, responsibilities and internal cybersecurity policies....

InfoSec: Applying AI to Third-Party Risk Management to Achieve Consistency

Information Security teams face a mounting challenge: as businesses outsource more critical functionality to third parties, third-party cybersecurity incidents are hitting unprecedented highs. Add to this a widespread regulatory push for increasingly strict third-party risk management (TPRM) practices, and Infosec...

Tracking and Mitigating Emerging Threats in Third-Party Risk Management

In business environments defined by large, interconnected vendor ecosystems, it’s extremely hard to identify emerging threats, let alone choose which ones to address. Organizations are overwhelmed by the many indicators of compromise (IoCs) they are alerted to, yet many lack the resources to investigate even a...

Sponsored by OneTrust

Data Privacy and Data Protection: The Basics Explained

In this eBook we will take a closer look at some of the key terms that you will come across when working in the privacy space. We’ll also outline some of the major privacy and data protection laws from around the world – highlighting the global focus on individuals’ privacy.

Sponsored by OneTrust

Preparing to Self-Certify with the EU-US DPF

The principles of the EU-US DPF provide US organizations with clear responsibilities for protecting personal data that has been transferred from the EU. This ensures that EU data subjects receive effective safeguards and protection, as required by the GDPR, when their data is transferred to non-EU countries.

Sponsored by OneTrust

Understanding the Data Privacy Maturity Model

Data privacy is evolving from a regulatory compliance initiative to a customer trust imperative. Check out this eBook to see how the Data Privacy Maturity Model captures this transition in four stages.

Sponsored by OneTrust

Moving through the Data Privacy Maturity Model

The Data Privacy Maturity Model (DPMM) serves as a comprehensive guide for organizations to evolve their data privacy programs from a tactical, compliancefocused approach to a strategic, value-driven framework. It’s designed to help organizations not only comply with regulations but also build customer trust and...

Sponsored by OneTrust

Comparing US State Privacy Law Requirements

The introduction of the California Consumer Privacy Act (CCPA) in 2018 was a turning point for US state privacy laws. Since then, the privacy landscape in the US has rapidly expanded and now plays host to no fewer than 17 comprehensive state privacy laws.

Sponsored by Netskope

2024 Gartner® Magic Quadrant™ for Security Service Edge

Secure, optimized work from anywhere is already recognized as a necessity and a primary business opportunity for all IT teams. SSE successfully enables this by converging Web Proxy (SWG), ZTNA, CASB, and DLP into one, powerful, high-performing solution.

Sponsored by Netskope

2024 Gartner® Critical Capabilities for Single-Vendor SASE

The Gartner Critical Capabilities for Single-Vendor SASE Report complements the Gartner Magic Quadrant by diving deeper into each vendor’s offering and evaluates them based on the most important capabilities and use cases.

Sponsored by Netskope

2024 Gartner® Magic Quadrant™ for Single-Vendor Secure Access Service Edge (SASE)

Gartner defines SASE offerings as those that deliver multiple converged-network and security-as-a-service capabilities. These offerings use a cloud-centric architecture and are delivered by one vendor.

Maximize Cybersecurity Investment and Performance with Peer Benchmarking

With billions of dollars poised to be spent on cybersecurity across the next decade, CIOs and CISOs are asking: Where do I prioritize capital investment to strengthen our organization's cyber maturity and resilience? Where should I allocate scare resources to immediately elevate our cyber preparedness and close...

How Tower Health Transformed Third-Party Risk Management

Relying 100% on spreadsheets and manual processes, Tower Health faced significant challenges managing third-party risk (TPRM). This “broken and inefficient” approach drove persistent frustrations, and severely limited the volume of third-party risk assessments that could be completed each year – with no time for...

How Intermountain Health Went From Managed Chaos to Strategic Cyber Risk Management

Like many healthcare organizations, Intermountain Health did the best they could with the resources they had managing third-party and enterprise risk. With a heavy reliance on spreadsheets and a healthy stack of Post-It Notes®, managing cyber risk was highly manual, time consuming, and simply not...