Collaborative Strategy Guild » risk http://collaborativestrategyguild.com Sat, 04 Feb 2012 13:39:51 +0000 en hourly 1 http://wordpress.org/?v=3.3 Risk of breaches: Congress asks SEC to intervene http://www.securitycurve.com/wordpress/archives/4125?utm_source=rss&utm_medium=rss&utm_campaign=risk-of-breaches-congress-asks-sec-to-intervene http://www.securitycurve.com/wordpress/archives/4125?utm_source=rss&utm_medium=rss&utm_campaign=risk-of-breaches-congress-asks-sec-to-intervene#comments Fri, 13 May 2011 12:57:02 +0000 Ed Moyle http://www.securitycurve.com/wordpress/?p=4125

As predicted, congress is stirring the pot around additional oversight relative to breach disclosures. This time, the plan is to ask the SEC to get involved and require firms to give details about breach disclosure risk.  An interesting idea.

Their supposition is that firms aren’t really doing anything about IT risk.  A supposition that is correct, by the way.  As a person in the business of providing risk-based support to companies, I’m all about making the services I provide mandatory across the board (how sweet would that be?)  But realistically, I think they’re missing a piece of the puzzle.

Namely, their premise seems to be that increased... Continue reading: Risk of breaches: Congress asks SEC to intervene

]]>

As predicted, congress is stirring the pot around additional oversight relative to breach disclosures. This time, the plan is to ask the SEC to get involved and require firms to give details about breach disclosure risk.  An interesting idea.

Their supposition is that firms aren’t really doing anything about IT risk.  A supposition that is correct, by the way.  As a person in the business of providing risk-based support to companies, I’m all about making the services I provide mandatory across the board (how sweet would that be?)  But realistically, I think they’re missing a piece of the puzzle.

Namely, their premise seems to be that increased risk of a breach is somehow a risk to investors – so investors should be able to tell how risky a company is before they decide to take a position in it.  An interesting premise, but one not entirely supported by the facts.  Ask yourself: who is the party most impacted by a breach?  Is it the shareholders?  Is it the company employees?  No…  it’s customers.  And really, long term, they tend not to care very much.

Taking an investor’s-eye view, we know that while firms that are breached tend to take a short-term hit in their stock price (really, any bad news will do that), after a few months, that hit will tend to smooth out.  In fact, historically – because the consequences of being a victim of a breach for a firm from an investment perspective tends to be relatively minimal.  Sure, there could be fines and lawsuits.  But generally speaking, the core of their business: the desire of customers to purchase whatever widget it is they’re selling, remains unaffected.

Don’t get me wrong, I’m not saying regulation in this area isn’t a good thing.  In fact, I think it’s huge.  I think that firms have a responsibility to act as stewards of data they hold on behalf of the public.  But disclosure of IT risk for the purposes of guiding investment decisions?  Maybe I’m off base here, but would anybody really care about that?  Or would it just become another document filing that nobody reads?

]]> http://www.securitycurve.com/wordpress/archives/4125/feed 0 Mitigating Risk and Finding Opportunity in Software as a Service (SaaS) E-mail for Small and Medium Businesses http://collaborativestrategyguild.com/2010/01/mitigating-risk-and-finding-opportunity-in-software-as-a-service-saas-e-mail-for-small-and-medium-businesses/ http://collaborativestrategyguild.com/2010/01/mitigating-risk-and-finding-opportunity-in-software-as-a-service-saas-e-mail-for-small-and-medium-businesses/#comments Mon, 18 Jan 2010 18:47:40 +0000 Karen Hobert http://collaborativestrategyguild.com/?p=141 here or go to our Research page.
Software as a Service (SaaS) e-mail offerings provide some operational productivity benefits at lower prices, although it is not a silver bullet, and should not be considered a compromise to existing solutions. SaaS e-mail service bundles can provide capabilities not previously available with existing e-mail solutions especially with operational aspects of managing an e-mail infrastructure. Although total cost of ownership (TCO) is a leading driver for choosing SaaS e-mail, customers should approach SaaS e-mail options based on how the solution will improve the e-mail experience... Continue reading: Mitigating Risk and Finding Opportunity in Software as a Service (SaaS) E-mail for Small and Medium Businesses

]]> Announcing the latest CSG publication, “Mitigating Risk and Finding Opportunity in Software as a Service E-mail for Small and Medium Businesses.” You can download the white paper here or go to our Research page.

Software as a Service (SaaS) e-mail offerings provide some operational productivity benefits at lower prices, although it is not a silver bullet, and should not be considered a compromise to existing solutions. SaaS e-mail service bundles can provide capabilities not previously available with existing e-mail solutions especially with operational aspects of managing an e-mail infrastructure. Although total cost of ownership (TCO) is a leading driver for choosing SaaS e-mail, customers should approach SaaS e-mail options based on how the solution will improve the e-mail experience and increase user and operational productivity as well as mitigate risks.

]]> http://collaborativestrategyguild.com/2010/01/mitigating-risk-and-finding-opportunity-in-software-as-a-service-saas-e-mail-for-small-and-medium-businesses/feed/ 2