Skip to content

andrew sheves

simplifying risk management

  • Books
  • Blog
  • Guides
    • Enterprise Security Risk Management
    • Building a risk management system
    • Conducting a Risk Assessment
    • Getting started
  • Software
    • DCDR blog posts
  • Training

Category: Blog post

Using blockchain to validate records in DCDR

February 24, 2021February 24, 2021 ~ Andrew ~ Leave a comment

We're adding a blockchain registry to DCDR to create a two-level process for verification during audit or investigations. First, records can be verified against the DCDR registry to determine provenance. Second, the DCDR registry can also be verified against the archived versions stored in a third-party distributed registry.

Risk reports in 30 seconds?

January 19, 2021January 19, 2021 ~ Andrew ~ Leave a comment

It’s as easy as 1, 2, 3 with DCDR

80 / 20 your risk management

January 11, 2021January 11, 2021 ~ Andrew ~ Leave a comment

Apply the 80/20 rules to your risk management portfolio. That's going to help focus on what's most critical and identity the mitigation that will give you the most bang for your buck.

Lets’s wait and see…

January 4, 2021January 4, 2021 ~ Andrew ~ Leave a comment

Happy New Year. Sorry this is a grim (stern?) start to the year but this idea bears repeating "Let's wait and see…" ..actually, let's not. Let's do something about [fill in the risk here] right now. The sooner we start to act, the earlier we'll understand the situation, the faster we'll be able to mobilize … Continue reading Lets’s wait and see…

Happy New Year! Here’s to a great 2022!

December 28, 2020December 28, 2020 ~ Andrew ~ Leave a comment

Don't worry, that's not a typo. Nor does it mean that you've missed a whole year (although we probably all feel like we could have done with a little less 2020). But I want you to imagine for a second that it's almost January 2022. Why? Well, although we're all going to probably feel a … Continue reading Happy New Year! Here’s to a great 2022!

Get your risk governance system running like clockwork

December 16, 2020December 16, 2020 ~ Andrew ~ Leave a comment

Here's how to set up Asana or even Google calendar to automate large chunks of your risk governance process.

Sweat the small stuff this week

December 10, 2020December 4, 2020 ~ Andrew ~ Leave a comment

Why not take the next week or two to sweat the small stuff and address a few of those risks in the lower ambers / higher greens region. Give the bottom half of the risk register some TLC and come back in 2021 refreshed and ready.

Risk appetite and risk tolerance

December 4, 2020December 7, 2020 ~ Andrew ~ Leave a comment

Understand and define your risk tolerance and risk appetite as this helps managers at all levels understand where they are in relation to the organization's risk 'comfort level'

Getting ready for 2021

November 27, 2020November 27, 2020 ~ Andrew ~ 2 Comments

2020 felt like we were playing on Heroic mode but now we're close to 2021, it's a good time to review your risk management system and get ready for next year.

Boiling the kettle: when risks become events

November 3, 2020November 3, 2020 ~ Andrew ~ Leave a comment

How can you spot the point where a risk - a thing that could occur - becomes an event that is occurring? I'd argue that you don't need to identify the specific point of change, and you'll waste valuable time trying to spot the exact moment of transition. Most importantly, if you wait to see the transition point, your response will be on the back-foot from the get-go.

Posts navigation

Older posts

Search for something

Books

Go Beyond The Spreadsheet for a deep dive into the risk assessment process

 

Building a risk management system? Get my step-by-step guide.

build a risk management system with this handbook

Get my newsletter

Feeling sociable?

  • Instagram
  • Medium
  • Twitter
  • LinkedIn

Wondering why there’s no cookies popup? Simple. We don’t use ’em.
Instead, we use Fathom Analytics to preserve your privacy.

Powered by WordPress.com.