Enterprise Risk Management in the eye of COVID-19 storm

riskacademy — Mon, 08 Jun 2020 06:52:52 +0000

Enterprise Risk Management [ERM] has come a long way. Since the mid-1990s, ERM has emerged as a concept and as a management function within organisations.

Its emergence can be traced to two main causes. First, following a number of high-profile company failures and avertible large losses, the latitude of corporate governance has widened to clasp the risks that a company takes. Second, shareholder value modeis playing a greater role in

strategic development. Early strategic planning models paid inadequate attention to risk.

As business risks continue to surge, organizations are finding it essential to implement some sort of formal risk management system. An effective enterprise risk management (ERM) program can help organizations manage their risks and maximize opportunities.

Organisations in all types of industries, public and private, have observed a variety of benefits from enhancing their risk management agendas.

A committee of five organizations dedicated to thought leadership around risk management provided a definition of ERM in 2004. The Committee of Sponsoring Organisations (COSO) defined it as:

“… a process, effected by the entity’s board of directors,…

Dark Reading | Security | Protect The Business

riskacademy — Tue, 02 Jun 2020 15:23:44 +0000

Enterprise Vulnerabilities
From DHS/US-CERT’s National Vulnerability Database

CVE-2020-13659
PUBLISHED: 2020-06-02

address_space_map in exec.c in QEMU 4.2.0 can trigger a NULL pointer dereference related to BounceBuffer.

CVE-2020-10703
PUBLISHED: 2020-06-02

A NULL pointer dereference was found in the libvirt API responsible introduced in upstream version 3.10.0, and fixed in libvirt 6.0.0, for fetching a storage pool based on its target path. In more detail, this flaw affects storage pools created without a target path such as network-based pools like …

CVE-2020-10739
PUBLISHED: 2020-06-02

Istio 1.4.x before 1.4.9 and Istio 1.5.x before 1.5.4 contain the following vulnerability when telemetry v2 is enabled: by sending a specially crafted packet, an attacker could trigger a Null Pointer Exception resulting in a Denial of Service. This could be sent to the ingress gateway or a sidecar, …

CVE-2020-10136
PUBLISHED: 2020-06-02

Multiple products that implement the IP Encapsulation within IP standard (RFC 2003, STD 1) decapsulate and route IP-in-IP traffic without any validation, which could allow an…

Enterprise – РИСК-АКАДЕМИЯ – АНО ДПО ИСАР

Enterprise Risk Management in the eye of COVID-19 storm

Dark Reading | Security | Protect The Business