It is five years since the publication of Nassim Nicholas Taleb’s book The Black Swan. In the book, Taleb introduces the concept of Black Swan events, which he characterizes as events that are 1) rare; 2) extremely impactful and 3) often endowed by people – after the fact – with elements of predictability. Taleb argued that uncertainty cannot be tamed, in his words, and that it is foolish to attempt to tame it.
A Silicon Valley engineer has just been found guilty of stealing trade secrets from Marvell Technology in a case that has been unfolding in federal court for more than 6 years.
Those who work in security are well aware that violence in the workplace is one of those risks that can pose a threat to the safety of employees or visitors to their facility. After all, no industry is immune from this hazard. Some, may however, be less familiar with how the issue impacts industries outside their own.
Risk appetite isn’t a term that comes up a lot in the security trade media. This is interesting, because understanding risk appetite is a crucial factor in developing acceptable security programs, communicating value, and aligning the function with the goals of the business — all of which are talked about in security circles all the time. So what is risk appetite?
Healthcare institutions have managed workplace violence with measurable success, despite the challenges faced in hospitals, emergency rooms, mental health, nursing homes, long-term care and community healthcare facilities. The magnitude of the problem is astounding – its devastating impact looms mightily in the hearts and minds of boards of directors, C-suites and security directors as both a real institutional threat and a contentious business reality facing healthcare today.
Although risk managers are taking on more strategic roles in their organizations, a disconnect still exists in many organizations between how risk managers and senior leaders view the role of risk management, according to a survey by Marsh and RIMS.
It’s a scary world out there. Hackers stalk your networks just waiting to access your data. Identity thieves are busily scheming how to take over your assets. Fraudsters look for ways to take advantage of your good graces for personal gain. Maybe you have total confidence in your information security efforts because your IT team is well-versed at protecting networks and data assets. But what about the business processes themselves, or the people responsible for the day-to-day operations of those processes?