tag:blogger.com,1999:blog-71897767535732211622012-04-27T20:16:35.523-04:00Enterprise Litigation GovernanceEdnoreply@blogger.comBlogger87125tag:blogger.com,1999:blog-7189776753573221162.post-48237660843174700222012-04-22T05:02:00.000-04:002012-04-23T09:19:35.816-04:00

Operational Risk Management professionals wonder about the "Tone at the Top" and decisions at the latest Board of Directors meetings to ignore or investigate a whistleblowers claims of ethics or governance violations in the workplace. The financial services companies have for years been the target of scrutiny for claims of fraud, mistreatment of consumers and violations of several U.S. federal

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-51592767075292734772012-04-08T05:07:00.002-04:002012-04-08T20:53:25.501-04:00

On this Easter Sunday the prayers are silent. For family, friends and also for the subject matter experts in business and the U.S. government. They have been waking us up again to the reality of the Operational Risks we now face, to our ubiquitous digital-based economic infrastructure. The message is clear to those insiders, who have been trying to defend our "Digital Castles" against

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-84570278696858535932012-03-24T05:04:00.001-04:002012-03-24T21:18:55.186-04:00

There is a well known threat that has been talked about with the Board of Directors behind closed doors for years. This threat is not new to most Operational Risk Management professionals and yet executive management is still in denial that it could happen to us. Have you or someone in your C-Suite ever woken up one morning and wondered how the companies new plans for a merger are now in the

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-64355837386998144632012-02-25T05:04:00.002-05:002012-02-25T12:48:25.194-05:00

Next week in the U.S. there will be thousands of risk management and security professionals invading the RSA Conference in San Francisco. The myriad of topics, education and case studies are worth examining to see what is on the mind of these thought leaders and practitioners who are also designated speakers. You can even look to the popular press to see what the vibe is on what this years

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-66851532246535230502012-02-04T05:04:00.001-05:002012-02-04T12:14:15.008-05:00

The safety and security of your corporate assets is a Board of Directors level issue. The loss events including adversarial litigation for errors, omissions, or just plain ignorance of regulatory compliance are gaining momentum. These Operational Risks associated with human behavior and the daily tasks performed on the job remain a vast vulnerability within the corporate enterprise. Why?The

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-14486033686744783352011-12-18T05:02:00.001-05:002011-12-18T20:16:02.562-05:00

Operational Risk Management in your organization may be in need of a more robust awareness campaign.  Malfeasance and ethical wrongdoing is continuously perpetuated in the workplace when those who are victims or witnesses refuse to speak up. Many fear the retaliation by supervisors or other co-workers. This study emphasizes the issue at hand:Labaton Sucharow LLP yesterday announced the results of

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-69376029349617996822011-10-01T05:09:00.001-04:002011-10-01T16:34:24.316-04:00

The Operational Risk professionals are applying the use of effective software tools in the Energy Sector. After all, the core disciplines of OPS Risk lie with safety and security and the current reality of deepwater drilling beyond 8,000 feet of ocean is here now.There are few organizations that understand the risks associated with drilling and capturing precious natural resources under these

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-71090030541920952222011-07-30T05:04:00.001-04:002011-07-30T14:05:40.058-04:00

Operational Risks continue to plague any senior manager with the title of "Corporate General Counsel". "Achieving a Defensible Standard of Care" remains ever so challenging. General Counsel digital leadership is required by the Board of Directors. A recent Corporate Executive Board Report outlined some of their top line issues in a recent Corporate Counsel article by Catherine Dunn: 1.

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-60288814413402289672011-07-09T05:07:00.000-04:002011-07-09T16:28:57.275-04:00

The banking institutions of the globe are on high alert. The Operational Risk doctrine is finally getting beyond the historical threats of fraud and rogue traders to the "New Normal" of other significant business disruptions. It's been on the horizon for some time, yet now Basel is finally enhancing the rules that have so far been ignored or given little consideration:Banks should bolster their

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-56528072691797681332011-06-18T05:01:00.001-04:002011-06-18T13:22:39.136-04:00

Board Directors are ever more tuned into the recent 2011 case settlements in Foreign Corrupt Practices Act (FCPA) violations. This is because Operational Risk Professionals are being much more proactive than years past on uncovering malfeasance in the supply chain operations of major global conglomerates: • Notable 2011 FCPA Settlements. 2010 was a record year for FCPA enforcement, and thus far

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-82774359345943079972011-05-28T05:09:00.000-04:002011-05-28T13:00:50.872-04:00

OPSEC in the Defense Industrial Base (DIB) is on high alert since the RSA SecureID vulnerability was revealed several months ago. The Operational Risks Management discipline is now ever so pervasive in private sector companies who have outsourced national security programs. When top secret information is at risk, the game plan shifts from a single company incident to a federal priority. By Jim

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-80295939072876643762011-03-27T05:03:00.001-04:002011-03-27T15:55:28.113-04:00

Levers in the Homeland Security Intelligence (HSI) ecosystem impact the performance and the health of the environment that the entities are sharing their respective insights. These HSI entities are people within the analytic ecosystem who are diverse in the art and science they utilize to create and share insight. The threat to any ecosystem in many cases is "too much" or "too little" of a key

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-82545782809983052422011-02-20T05:05:00.002-05:002011-02-20T21:51:12.038-05:00

The key Operational Risk Management news from this years RSA Conference is now coming in, yet there are inside sources who still need to be interviewed. What did they think was the most brilliant presentation or idea(s) presented? This particular release caught some eyes as it addresses much of the thinking on the latest evolution of the Security Operations Center (SOC): New Vision for Security

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-42243843052003163342011-02-07T05:03:00.000-05:002011-02-07T22:15:07.263-05:00

At the speed of the modern global enterprise, cyber incidents are a growing component of operational risk, according to 1SecureAudit Managing Director and Chief Risk Officer Peter L. Higgins. Digital forensics intelligence provides analysts, investigators and management the ability to make more informed decisions regarding a prudent course of action. Utilizing digital evidence can mean the timely

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-73393073137772696402011-01-22T05:04:00.001-05:002011-01-22T16:42:58.024-05:00

The media communications and advertising industries are buzzing over the new U.S. Federal Trade Commission report and framework entitled: Protecting Consumer Privacy in an Era of Rapid Change. The Operational Risk Management implications to your enterprise could be significant if you currently do not understand how your marketing department provides disclosures or manages consumer collected

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-64616740268622940162010-10-04T05:05:00.001-04:002010-10-04T10:17:14.890-04:00

The Chief Information Security Officer's (CISO) are getting significant new understanding of the new threat emerging in the digital domains. The Energy, Chemical, Water, Transportation and other Critical Infrastructure sectors are on high alert. The Operational Risks associated with their Programmable Logic Controller (PLC) systems using Siemens technologies are being attacked. Stuxnet is

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-58476135657364426422010-09-28T05:07:00.001-04:002010-09-28T16:34:35.249-04:00

Operational Risk Management is your foundation for crisis leadership. All work locations have distinct categories of threats that are relevant to the site, people and type of business. Assessing the violent factors is the role of FBI profiler Mary Ellen O'Toole and there are four categories according to a study entitled: "The School Shooter: A Threat Assessment Perspective."A Direct

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-83107014508917139642010-09-18T05:09:00.000-04:002010-09-18T22:10:01.777-04:00

A modern day "Operational Risk China Syndrome" is making the Board of Directors nervous these days. The new syndrome otherwise called the Foreign Corrupt Practices Act (FCPA) has been the buzz at rating agencies for months. Are you sure about your ability to withstand the scrutiny of a FCPA litmus test? Board Member Magazine explains: On June 2nd, Fitch Ratings agency announced that

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-580348622803520602010-08-29T05:08:00.000-04:002010-08-29T15:29:44.149-04:00

Operational Risk Management is a continuous process in the context of our rapidly expanding corporate environments. What is one example? People traveling to emerging markets to explore new business opportunities or new suppliers that will be connected by high speed Internet connections to the supply chain management system. These boundaries of managing operational risk, have not only

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-32860776995223342202010-07-29T05:03:00.000-04:002010-07-29T15:35:04.963-04:00

The new Verizon Cyber Report is a valuable read for OPS Risk professionals that focus on data breach and incident response. The full breach report can be found at this link at Verizon Business.We have to agree with the observations made by Brian Krebs on the following topic in the report:A key finding in this year’s report is that most companies suffering breaches missed obvious signs

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-18911878760659043542010-06-22T05:08:00.000-04:002010-06-22T11:09:38.064-04:00

Operational Risk Management professionals in corporate America have been following the Quon vs. City of Ontario case for five plus years. Now the Supreme Court of the United States has ruled 9-0 to increase the clarity on the new age of electronic privacy in the workplace. The LA Times explains:Washington…In its first ruling on the rights of employees who send messages on the job, the

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-36677678830967901352010-05-11T05:19:00.000-04:002010-05-11T11:20:59.087-04:00

What continues to be the greatest economic threat to your organization? Is it "Internal" or "External" to your institution? Could it be both? Insiders rarely work alone and therefore the nexus with some outside influence, whether it be a person, life factors or some other entity are typically in play.Is an engineer in R & D copying precious intellectual property information from within

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-83714724038541247352010-04-24T05:05:00.001-04:002010-04-24T13:27:49.708-04:00

If you are a large U.S. based pharmaceutical company the odds are that over a third of your annual sales are overseas. Selling drugs in the EU, Asia and South America into the health care systems is a tremendous pipeline for Eli Lilly, Pfizer and others who find these markets hungry for their products. What kind of Operational Risks might exist for these firms and should be on "Red Alert"

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-58107482735340682392010-04-01T05:11:00.002-04:002010-04-02T09:43:47.625-04:00

In a recent 2010 CSO Magazine sponsored eCrime Digital Watch Report and survey of 535 companies there are some observations on Operational Risk Management worth examination.This report was focused on the "Insider Threat" and the area of concern is on "Digital Incidents by Insiders:"Past 12 months the number of incidents reported increased 16%The per incident monetary loss (mean) was

Ednoreply@blogger.comtag:blogger.com,1999:blog-7189776753573221162.post-33815303640645154492010-03-22T05:06:00.002-04:002010-03-22T17:10:28.279-04:00

A wide spectrum of Operational Risk incidents are in the news. Executive Management in the private sector, law enforcement and the military are investigating cases of identity fraud, cyber hacking and insider digital sabotage, transnational economic crime, intellectual property theft, ACH cyber robbery, counterfeiting, workplace violence and industrial espionage.

Ednoreply@blogger.com