TIM-8390: Strategic Management of Cybersecurity: General and Technology

Abdullah, H. (2019). Analyzing the technological challenges of Governance, Risk and Compliance (GRC). 2019 4th International Conference on Electrical, Electronics, Communication, Computer Technologies and Optimization Techniques (ICEECCOT), Electrical, Electronics, Communication, Computer Technologies and Optimization Techniques (ICEECCOT), 2019 4th International Conference On, 274–282.
This journal article details the many benefits GRC has for organizations, and discusses that it is equally important to address the numerous challenges GRC has in respect to frameworks, people, process and technology.

Chergui, M., Chakir, A., & Medromi, H. (2019). Smart IT governance, risk and compliance semantic model: business driven architecture. 2019 Third World Conference on Smart Trends in Systems Security and Sustainablity (WorldS4), Smart Trends in Systems Security and Sustainability (WorldS4), 2019 Third World Conference On, 297–301. https://doi.org/10.1109/WorldS4.2019.8903997
This paper focuses on how IT-Governance (ITG) Risk and Compliance can be deployed in a smart digital architecture able to understand and solve everyday business worries related to data and IT through business process orchestration.

Sillaber, C., Mussmann, A., & Breu, R. (2019). Experience: Data and Information Quality Challenges in Governance, Risk, and Compliance Management. Journal of Data and Information Quality (JDIQ) - On the Horizon, Experience Paper and Regular Papers, 11(2), 1–14.
This journal article explores how governance, risk, and compliance (GRC) managers often struggle to document the current state of their organizations. This is due to the complexity of their IS landscape, the complex regulatory and organizational environment, and the frequent changes to both. GRC tools seek to support them by integrating existing information sources.

De Fréminville, M. (2020, June). Cybersecurity and decision makers. Wiley-ISTE.
Read Chapter 3: Risk Mapping
This chapter describes the process of mapping the organization should use to accomplish governance goals and objectives.