#riskmgmt
LightNews LightNews
propcazhpm.bsky.social
This is important.

disaster risk reduction (DRR)

#HumanRight #RiskShift #RiskMgmt #InclusiveDRR
drrdynamics.bsky.social Kevin Blanchard (he/him) @drrdynamics.bsky.social · Sep 8
Over the weekend, arrests at UK pro-Palestine protests showed shrinking civic space. #InclusiveDRR relies on civic freedoms, fair laws, and accountable digital tools.

Without them, resilience falls short.
My report can be found here -
irp.cdn-website.com/cde3424c/fil...

#HumanRights
Graphic titled ‘Structural drivers of risk and their impact on inclusive DRR’. It explains how rights erosion across civic, legal, and digital domains influences disaster risk reduction. A table shows three domains of rights exclusion. Civic space involves restrictions on protest, civil society activity, and freedom of voice, leading to reduced participation, weaker accountability, and lower public trust. Legal systems involve discriminatory laws, criminalisation of identity, and legal invisibility, resulting in exclusion from services, fear of seeking help, and limited legal recourse. Digital technologies involve surveillance, data misuse, and lack of oversight in automated systems, creating privacy risks and biased or incomplete decision making. The background is blue to green gradient with a yellow border highlighting the table.
September 8, 2025 at 11:05 AM
t0sche.bsky.social
Heads down working on the next iteration of ideas I presented here: stephenshaffer.io/modeling-ass...

Would love to hear thoughts, opinions, and reactions surrounding the use of grouped EPSS or EPSS in general.

#epss #cve #riskmgmt #infosec
Modeling Asset Risk Using EPSS
How can we best operationalize EPSS in our environment by utilizing its mathematical properties?
stephenshaffer.io
January 31, 2025 at 3:20 PM
potato.software
Healthcare IT budgets are rising, but breaches and ransomware keep piling up. Resilience and vendor management are critical according to this article.

#HealthcareIT #Potatosecurity #RiskMgmt zurl.co/WhPuR
October 29, 2025 at 2:05 PM
sudotruth.bsky.social
December reality check:

which cyber risk keeps you up at night — #ransomware 💣, #supplychain issues 🔗, or insider threats 🕵️‍♀️ — and why?

Share your top concern.

#CyberSecurity #Leadership #RiskMgmt
December 1, 2025 at 4:21 PM
propcazhpm.bsky.social
"We will invest in community capacity-building with clear roles. If a disaster strikes, who will do what (local govt, women’s groups, youth, etc.)... ?

The pilot will do scenario-based planning and on top of that will be parametric insurance and granular weather-based information." #RiskMgmt
February 26, 2026 at 4:56 AM
noaharper.bsky.social
'Navigating cybersecurity: Insights and tips from Niel Harper, Doodle's CISO' - Honoured to be featured in this interview where I talk about cybersecurity trends, protecting customer data, and what businesses can do to stay safe bit.ly/47KGm2o #security #resilience #compliance #riskmgmt #leadership
Navigating cybersecurity: Insights and tips from Niel Harper, Doodle’s CISO
Learn about cybersecurity trends, data protection, and business strategies in our interview with Niel Harper, Doodle's CISO.
bit.ly
December 5, 2024 at 12:10 PM
bmitmsp.bsky.social
Healthcare IT budgets are rising, but breaches and ransomware keep piling up. Resilience and vendor management are critical according to this article.

#HealthcareIT #Cybersecurity #RiskMgmt zurl.co/WhPuR
Breaches are up, budgets are too, so why isn't healthcare safer? - Help Net Security
Top concerns in healthcare cybersecurity reveal risks from ransomware, vendor breaches, and weak defenses despite rising investments.
zurl.co
October 29, 2025 at 2:05 PM
mytechexperts.com
Healthcare IT budgets are rising, but breaches and ransomware keep piling up. Resilience and vendor management are critical according to this article.

#HealthcareIT #Cybersecurity #RiskMgmt
Breaches are up, budgets are too, so why isn't healthcare safer? - Help Net Security
Top concerns in healthcare cybersecurity reveal risks from ransomware, vendor breaches, and weak defenses despite rising investments.
www.helpnetsecurity.com
October 30, 2025 at 7:05 PM
aetechdesign.bsky.social
Healthcare IT budgets are rising, but breaches and ransomware keep piling up. Resilience and vendor management are critical according to this article.

#HealthcareIT #Cybersecurity #RiskMgmt
Breaches are up, budgets are too, so why isn't healthcare safer? - Help Net Security
Top concerns in healthcare cybersecurity reveal risks from ransomware, vendor breaches, and weak defenses despite rising investments.
www.helpnetsecurity.com
November 20, 2025 at 1:00 PM
kleinerjedi.bsky.social
Tja, bin selber Exote in meiner Branche, da ich aus der IT-Revision komme: eine SOX-Compliance ohne tiefes Verständnis von Riskmgmt ist z.B. undenkbar - da stieß ich auch bei DS-Kollegen auf Hassgefühle, wenn ich sie nach Riskoanalysen zu mäßig abgesicherten ConfigItems oder ganzen Prozessen fragte😉
October 14, 2024 at 6:11 PM
elixistechnology.bsky.social
What if your organization's biggest risk isn't a competitor, but its AI talent being centralized? This piece sheds light on the hidden dangers of concentration in AI teams and why diversification matters.

www.forbes.com/councils/for...

#AI #TalentStrategy #RiskMgmt
The $300 Million Employee: When AI Talent Becomes Concentration Risk
Major talent investments require investment-grade due diligence, including competitive analysis, scenario planning and ongoing performance monitoring.
www.forbes.com
November 1, 2025 at 9:00 PM
kleinerjedi.bsky.social
Ist dir sicherlich neu, aber ich hab da mal was mit IT-Security, Datenschutz und Revisions-Gedöns gemacht:
Solche Typen denken in Riskmgmt, is aber was anderes als Vollkasko. Das ist so Zeugs, wenn Profis in Riskoanalysen Pro und Contra abwägen, weil zu Risiken auch Chancen gehören - dolle Sache 😉
October 14, 2024 at 4:14 PM
kleinerjedi.bsky.social
Lesenswert und dennoch orrr...:

"Fokus auf Impact statt Risiko" - das ist gehobener Blödsinn! Risiko sagt für sich gar nichts und Impact allein halt auch nicht: Riskmgmt. für geeignete Maßnahmen von leicht bis umfangreich ergibt sich grundsätzlich aus einer Riskmatrix (Impact zu Wahrscheinlichkeit)
Klassische Risiko Matrix mit Schadenshöhe (Impact) in Relation zu Wahrscheinlichkeit des Risikos, um geeignete Vorsorge zu treffen.
August 19, 2024 at 1:20 PM
cybercaptain.cc
AI hallucination almost triggered a US-China conflict. Verify AI outputs in critical ops!

#AI #Cybersecurity #RiskMgmt
CyberCaptain security infographic
September 19, 2026 at 4:39 AM
noaharper.bsky.social
'Cyber firms need to centre their own resilience' - I recently authored a piece for the Computer Weekly Security Think Tank discussing incident response in the wake of the July CrowdStrike incident - Let me know your thoughts 💭 bit.ly/3XuO0L0 #incidentmgmt #resilience #supplychain #riskmgmt
Cyber firms need to centre their own resilience | Computer Weekly
The Computer Weekly Security Think Tank panel considers incident response in the wake of the July CrowdStrike incident, sharing their views on what CrowdStrike got wrong, what it did right, and next s...
bit.ly
December 5, 2024 at 12:03 PM
hendryadrian.bsky.social
Cybercrime now operates like an industry, with AI accelerating threats at speed and scale. Resilience starts before a breach, with strong governance, trained people, and tested crisis exercises. #RiskMgmt #AIThreats #AXAXL
Cybercrime Has Gone Corporate. Is Your Business Ready?
Cybercrime is becoming increasingly industrialized, with AI accelerating the speed and scale of threats. Rébiah Bardot-Girard of AXA XL says resilience begins before an attack through strong people, governance, training, and tested crisis exercises. #AXAXL #RébiahBardotGirard
www.hendryadrian.com
September 19, 2026 at 12:45 AM
barronsdigital.bsky.social
Stop trading on emotion. Get real AI market signals, 2026 momentum & breakout setups, risk management, and trading psychology in one system. Instant download, lifetime access now. www.thebergcodex.shop/products/ber... #DayTrading #AITrading #RiskMgmt
AI Day Trading Bundle — Strategies, Signals & Risk Tools | Berg Codex
Master AI-powered day trading with proven strategies, risk frameworks & real-time signals. Instant PDF. 30-day guarantee. Trade smarter today.
www.thebergcodex.shop
September 8, 2026 at 4:53 PM
kapualabs.bsky.social
$AVGO appears stable, but tail risks hide beneath the AI rally. Customer concentration & supply chain fragility could trigger 50% drawdowns if guidance falters. We analyze the structural weaknesses threatening this valuation: https://post.kapualabs.com/mrrsrt9n #Investing #RiskMgmt 📊
July 11, 2026 at 2:23 AM
hendryadrian.bsky.social
Business-aligned risk management ties technical findings to financial, operational, and regulatory impact, enabling continuous prioritization with both qualitative and quantitative analysis. #IRAM3 #RiskMgmt #BusinessRisk
The Shift Toward Business-Aligned Risk Management
Risk assessment becomes more actionable when technical findings are tied to business impact, such as financial loss, operational disruption, and regulatory consequences. The article argues for a connected, continuous risk lifecycle that combines qualitative and quantitative analysis to help organizations prioritize controls and treatments based on real business value. #IRAM3 #CVSS...
www.hendryadrian.com
July 6, 2026 at 6:15 PM
binghuangde.bsky.social
Portfolio VaR (Value at Risk) is spiking. The 60/40 portfolio is failing because bonds are no longer a hedge—they are the source of the risk. China’s exit means stocks and bonds are moving in lockstep. Diversify into alternatives before the next liquidity crunch. #RiskMgmt
January 23, 2026 at 1:44 PM
voiceofcompliance.bsky.social
Wrap up the COSO journey with Monitoring Activities! 🎧 Get today’s #ComplianceTipoftheDay for a practical tip to strengthen oversight in your program.

🔗 https://bit.ly/45Phtnz #COSO #CorporateCompliance #RiskMgmt
June 27, 2025 at 5:03 PM
hendryadrian.bsky.social
NIST is reviewing updated IoT security guidance in SP 800-213 Rev. 1, aligning requirements with current risk management and treating IoT devices as system elements in federal systems. #NIST #IoTSecurity #RiskMgmt
NIST Opens Updated IoT Security Guidance to Public Review
NIST is seeking public feedback on updated IoT security guidelines in SP 800-213 Revision 1, which aim to better align cybersecurity requirements with current risk management needs. The draft emphasizes treating IoT products as system elements and includes clearer guidance for organizations integrating them into federal systems. #NIST #SP800-213 #SP800-213A...
www.hendryadrian.com
June 25, 2026 at 11:00 AM
hendryadrian.bsky.social
Webinar insight: third-party risk programs often look stronger on paper than in practice. Slow assessments, manual bottlenecks, and fourth-party visibility gaps still drive exposure. #ThirdPartyRisk #FourthPartyRisk #RiskMgmt
Webinar Today: Third-Party Risk in Practice – Where Programs Break Down and How to Respond
This live webinar on June 4, 2026 will explore the gap between how organizations believe their third-party risk programs are performing and what is actually happening in practice. It will use benchmark data to highlight slow assessments, manual bottlenecks, visibility gaps, and the growing impact of third-party and fourth-party exposure. #ThirdPartyRisk...
www.hendryadrian.com
June 4, 2026 at 5:45 PM
luebken.bsky.social
TIL about <a href="http://commitment-thebook.com" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link" target="_blank" rel="noopener" data-link="bsky">http://commitment-thebook.com . Sounds interesting. via @arneroock #commitment #riskmgmt #realoptions
Commitment - the book | Commitment - the book
Web site in support of our ...
commitment-thebook.com
November 19, 2024 at 6:04 AM
uwannawat.bsky.social
What if your organization's biggest risk isn't a competitor, but its AI talent being centralized? This piece sheds light on the hidden dangers of concentration in AI teams and why diversification matters.

#AI #TalentStrategy #RiskMgmt
https://www.forbes.com/councils/forbesbusinesscouncil/2025/09/03
The $300 Million Employee: When AI Talent Becomes Concentration Risk
The $300 Million Employee: When AI Talent Becomes Concentration Risk
www.forbes.com
November 1, 2025 at 2:10 AM