TIM-6750

Lindros, K. (2017, July 11). What is GRC and why do you need it?
This resource highlights how GRC can help align IT activities to business goals, manage risk effectively, and stay on top of compliance.

Cybersecurity & Infrastructure Security Agency. (2021). Federal information security modernization act.
This resource highlights the components of the Modernization Act.

Paul, J. A., & Zhang, M. (2020). Decision support model for cybersecurity risk planning: A two-stage stochastic programming framework featuring firms, government, and attacker. European Journal of Operational Research.

SANS Institute. (2020, July 13). Provides guidance on improving cyber defense using the MITRE ATT&CK framework.
This resource covers recommended methods of leveraging the MITRE ATTCK knowledge base to improve security operations and threat intelligence capabilities.

Williams, D. (2020). The MITRE ATT&CK framework: Where do you
start?
This resource describes the value in using the MITRE ATT&CK framework to measure the effectiveness of your organization’s ability to identify, detect, and prevent cyber intrusions.

MITRE. (2018, September 21). Helping states face cybersecurity challenges.
This resource highlights the importance of governance in addressing cyber risks and identifies trends.

Leow, S. (2020). Four questions about GRC solutions answered: As the world continues to change, consider leveraging technology for your GRC program. Plant Engineering, 74(9), 24–25.
The resource discusses the feasibility of using technology to advance the governance, risk, and compliance (GRC) programs by companies. Also included are the importance of GRC programs for effective decision making, risk mitigation and control, and industry standards compliance, as well as some questions that companies should ask when implementing GRC solutions like the things that should be done before adopting GRC technology, and how to improve cross-collaboration among departments.