Risk management and governance
With today's exponential advances in technology, CIOs, CTOs, CDOs and other IT leaders need critical advice on risk management and governance. Get news, guides and tips about technology-related compliance and data privacy issues, regulatory frameworks, limits on enterprise software development, cyber risk issues, metaverse dangers, cryptocurrency regulation and more.
Top Stories
-
News
15 May 2025
Proposed U.S. budget cuts raise fears about tech innovation
President Donald Trump's proposed FY 2026 budget slashes funding for federal agencies, including NSF and NIST, which support tech research and innovation in the U.S. Continue Reading
-
News
13 May 2025
AI copyright suits to be affected by Copyright Office stance
Federal report findings could weaken GenAI vendors' fair use positions in copyright suits. Continue Reading
-
Feature
13 Sep 2023
Top 10 benefits of blockchain for business
Blockchain's unique characteristics address many business issues. Here are 10 important benefits of blockchain and examples of the industries taking advantage of them. Continue Reading
-
Tip
08 Sep 2023
Risk prediction models: How they work and their benefits
Accurate risk prediction models can aid risk management efforts in organizations. Here's a look at how risk models work and the business benefits they provide. Continue Reading
-
Definition
07 Sep 2023
distributed ledger technology (DLT)
Distributed ledger technology (DLT) is a digital system for recording the transaction of assets in which the transactions and their details are recorded in multiple places at the same time. Continue Reading
-
Definition
06 Sep 2023
What is a smart contract?
A smart contract is a self-executing computer program that automatically executes the terms of a contract without the involvement of third parties. Continue Reading
-
Definition
31 Aug 2023
IT controls
An IT control is a procedure or policy that provides a reasonable assurance that the information technology (IT) used by an organization operates as intended, that data is reliable and that the organization is in compliance with applicable laws and regulations. Continue Reading
-
Definition
30 Aug 2023
three lines model
The three lines model is a risk management approach to help organizations identify and manage risks effectively by creating three distinct lines of defense. Continue Reading
-
Definition
30 Aug 2023
IT organization (information technology organization)
An IT organization (information technology organization) is the department within a company that's charged with establishing, monitoring and maintaining information technology systems and services. Continue Reading
-
News
29 Aug 2023
Microsoft Teams attack exposes collab platform security gaps
Criminal and state-sponsored hackers are ramping up cyberattacks on instant messaging platforms and other workplace collaboration tools. Meanwhile, enterprises' readiness lags. Continue Reading
-
Tip
29 Aug 2023
The CIO's role in strengthening cybersecurity
To effectively tackle security risks, organizations should proactively address the complexities of information security. Learn how CIOs can play a key role in cybersecurity. Continue Reading
-
News
22 Aug 2023
Generative AI adoption to grow with economic confidence
A PwC survey is the latest data point signaling a return to innovation spending, with generative AI adoption in the C-suite's plans. But business leaders remain sensitive to risk. Continue Reading
-
Feature
16 Aug 2023
Top 12 risk management skills and why you need them
Effective risk management is necessary in all parts of a business. Here are a dozen skills that risk managers need to be successful in their jobs. Continue Reading
-
Tip
16 Aug 2023
6 open source GRC tools compliance professionals should know
Organizations must meet a variety of regulatory compliance requirements today. Here's a look at six open source GRC tools and related resources that might help. Continue Reading
-
Tip
15 Aug 2023
Top 4 information security strategy essentials CIOs need
Right now, hackers are targeting your organization. Fight back by learning how CIOs can create a resilient and strong information security foundation. Continue Reading
-
Feature
15 Aug 2023
ISO 31000 vs. COSO: Comparing risk management standards
ISO 31000 and the COSO ERM framework are the two most popular risk management standards. Here's what they include and some of their similarities and differences. Continue Reading
-
News
14 Aug 2023
Cloud costs continue to rise among IT commodities
CIOs can expect higher cloud costs as the U.S. government's wholesale inflation index hits its highest rating for the technology category that includes this IT model. Continue Reading
-
News
11 Aug 2023
Biden order will force companies to weigh China investments
Companies are facing a new executive order and potentially congressional action restricting outbound investments in technologies such as quantum computing and AI in China. Continue Reading
-
Feature
11 Aug 2023
Traditional vs. enterprise risk management: How do they differ?
Traditional risk management and enterprise risk management are similar in their aim to mitigate risks that can harm a company. But there are differences between them. Continue Reading
-
Definition
09 Aug 2023
crisis management
Crisis management is the application of strategies designed to help an organization deal with a sudden and significant negative event, while maintaining business continuity. Continue Reading
-
News
07 Aug 2023
EU's antitrust probe into Microsoft comes too late
The EU's history of conduct over structural remedies to allay competition concerns means its Microsoft probe likely won't result in a substantial impact on the company. Continue Reading
-
Feature
04 Aug 2023
9 common risk management failures and how to avoid them
As enterprises rework their business models and strategies to meet various new challenges, risks abound. Here are nine risk management failures to look out for. Continue Reading
-
Feature
03 Aug 2023
Risk appetite vs. risk tolerance: How are they different?
Risk appetite and risk tolerance are related terms but not the same thing. Here's how they differ plus examples of risk appetite and risk tolerance statements. Continue Reading
-
Definition
01 Aug 2023
Computer Fraud and Abuse Act (CFAA)
The Computer Fraud and Abuse Act (CFAA) of 1986 is United States legislation that imposes criminal penalties on individuals who intentionally access a protected computer without proper authorization or whose access exceeds their authorization. Continue Reading
-
Definition
28 Jul 2023
compliance audit
A compliance audit is a comprehensive review of an organization's adherence to regulatory guidelines. Continue Reading
-
Feature
26 Jul 2023
Explaining risk maturity models and how they work
Explore risk maturity models and assessment tools for enhancing enterprise risk management. Improve ERM programs to mitigate risk and gain a competitive edge. Continue Reading
-
News
25 Jul 2023
Wayfair and the generative AI boom
The online home and furniture retailer is using the technology despite challenges such as unauthorized use of data and maintaining data privacy. It also released a room-planning tool. Continue Reading
-
News
20 Jul 2023
U.S. walks line between diplomacy, security with China
Amid talks of further export controls placed on China, administration officials reiterated President Biden's desire for communication and building U.S.-China relations. Continue Reading
-
News
19 Jul 2023
Tensions rise with EU over Digital Markets Act, tech policies
Congress members want the Biden administration to confront the EU about technology policies targeting U.S. businesses. Continue Reading
-
News
18 Jul 2023
A look at writers' battle to get AI vendors to pay them
An Authors Guild open letter asks vendors to pay for works previously used to train generative AI systems and calls for lawmakers to tighten copyright laws. Continue Reading
-
News
17 Jul 2023
Businesses caught in the crosshairs amid U.S., China tensions
As the U.S. and China continue to target each other with restrictive export controls, businesses are caught in the middle of an increasingly tense conflict. Continue Reading
-
Podcast
17 Jul 2023
Targeting AI: Responsible AI means regulation, ethical use
AI users should adhere to ethical standards, particularly in regard to generative AI chatbots, but the promise of the latest tech is too great to not embrace. Continue Reading
-
News
13 Jul 2023
Storage, server prices drop as inflation eases
Server and storage prices declined in June, reflecting cooling inflation, but companies remain intent on containing costs and optimization. Continue Reading
-
Podcast
07 Jul 2023
Impact data powers sustainability strategies for digital age
Unlock new growth potential and sustainability with impact data. Learn more in this podcast. Continue Reading
-
Definition
05 Jul 2023
Dodd-Frank Act
The Dodd-Frank Act (fully known as the Dodd-Frank Wall Street Reform and Consumer Protection Act) is a United States federal law that places regulation of the financial industry in the hands of the government. Continue Reading
-
Feature
22 Jun 2023
Blockchain for businesses: The ultimate enterprise guide
Despite the scary crypto headlines, enterprise blockchain is becoming more practical. Use our in-depth guide to help manage the risks and plan the best deployment for your needs. Continue Reading
-
News
19 Jun 2023
Supreme Court sidesteps Section 230 -- for now
Although the Supreme Court's recent decisions in cases against Twitter and Google avoided ruling on Section 230, the issue will likely be in front of the justices again soon. Continue Reading
-
News
15 Jun 2023
Server prices drop while cloud costs rise in PPI data
The U.S. government's latest inflation reading shows moderating hardware prices, which spiked in mid-2022. Cloud costs, however, have been moving in the opposite direction. Continue Reading
-
News
14 Jun 2023
Global cooperation on tech standards is falling apart
Increasing cooperation between the U.S. and EU on global tech standards will enable rather than hurt competition with China, experts argue. Continue Reading
-
News
13 Jun 2023
Salesforce moves forward with secure, private generative AI
With its new AI Cloud and built-in Einstein GPT Trust Layer, The CRM and CX vendor is investing in generative AI technology and adding data security and privacy features. Continue Reading
-
Tip
09 Jun 2023
Pros and cons of blockchain for ERP
ERP's longevity reaches back to the 1960s, but thanks to blockchain, an old dog may well learn some new business tricks in this ever-changing and modernizing world of technology. Continue Reading
-
News
07 Jun 2023
U.S.-China relations hinge on shifting reactionary mindset
Rep. Andy Kim said the U.S. needs to become more proactive in its relationship with China amid growing tensions between the two countries. Continue Reading
-
Tip
06 Jun 2023
9 benefits of cryptocurrency in business
Businesses adopting cryptocurrency can potentially improve their financial liquidity, attract new customers, ensure transaction transparency, reduce fraud and align with Web 3.0. Continue Reading
-
News
05 Jun 2023
Experts doubt U.S. retaliation following China's Micron ban
The Biden administration likely won't retaliate for China's Micron Technology ban but will continue to play the long game garnering independence from China in semiconductor chips. Continue Reading
-
News
01 Jun 2023
A look at 'risk of extinction from AI' statement
The statement equates the potential risk of human eradication from AI to that of nuclear war. However, some argue society should instead mitigate the existing risk of AI bias. Continue Reading
-
News
23 May 2023
Meta fine highlights EU, US data sharing challenges
Until the new EU-U.S. Data Privacy Framework is established, Meta's $1.2 billion euro fine should serve as a warning to U.S. businesses handling EU personal data. Continue Reading
-
Feature
19 May 2023
4 tips CIOs can use to drive change management
CIOs and IT leaders should be key drivers of change management programs. Learn valuable tips for navigating complexity and scaling technology rollouts. Continue Reading
-
News
18 May 2023
FTC warns businesses about biometric information use
The Federal Trade Commission said businesses will be held accountable for the way they use consumers' biometric information. Continue Reading
-
Feature
18 May 2023
How one CIO drives business transformation through tech
Tom Peck, CIDO at Sysco, shares valuable insights into the key role that CIOs play as a transformation driver while managing emerging technologies such as AI. Continue Reading
-
News
16 May 2023
CIOs take on organizational adaptability, resilience
CIOs and other tech executives are bracing their organizations to remain flexible in a period of unpredictable developments and bounce back when they take a punch. Continue Reading
-
Definition
12 May 2023
Generally Accepted Recordkeeping Principles (the Principles)
Generally Accepted Recordkeeping Principles is a framework for managing records in a way that supports an organization's immediate and future regulatory, legal, risk mitigation, environmental and operational requirements. Continue Reading
-
News
11 May 2023
U.S. debt crisis could hit government contractors hard
Government contractors should prepare now for the U.S. to default on its debt, which would result in halted payments among other challenges. Continue Reading
-
Feature
05 May 2023
MIT-CIO event explores digital resilience amid disruption
Allan Tate, executive chair of the MIT Sloan CIO Symposium, shares an overview of the 2023 event, including focus areas such as cybersecurity and tech evaluation. Continue Reading
-
Tip
04 May 2023
How to avoid greenwashing as a marketer
Greenwashing can erode customer trust and damage brand reputation. To avoid it, organizations can offer evidence to support their claims and use sustainability certifications. Continue Reading
-
News
04 May 2023
Examining AI pioneer Geoffrey Hinton’s fears about AI
The 'godfather of AI' claims AI will be misused for political gain and to manipulate humans. His resignation from Google came weeks after tech leaders called for an 'AI pause.' Continue Reading
-
Definition
01 May 2023
compliance framework
A compliance framework is a structured set of guidelines that details an organization's processes for maintaining accordance with established regulations, specifications or legislation. Continue Reading
-
Tip
28 Apr 2023
12 business continuity trends to keep an eye on
As technology rapidly evolves, IT pros are bound to see countless trends come and go. In business continuity, there are some significant trends shaping up to change the field. Continue Reading
-
Definition
27 Apr 2023
SQL injection (SQLi)
A SQL injection (SQLi) is a technique that attackers use to gain unauthorized access to a web application database by adding a string of malicious code to a database query. Continue Reading
-
News
14 Apr 2023
Tech pricing dips slightly in March as broader PPI declines
Servers, storage and professional services all saw decreases in the U.S. government's latest inflation update. Will prices continue to drop or repeat last year's volatility? Continue Reading
-
News
12 Apr 2023
Governments worldwide attempting to regulate generative AI
Countries worldwide are monitoring the generative systems with their own unique rules and laws. For example, China proposed new laws, and the U.S. requested public comments. Continue Reading
-
Feature
10 Apr 2023
IT spending priorities point to cyber, cloud and data
TechTarget's survey of IT professionals underlines the continued importance of security and cloud initiatives, as well as increased interest in data management and governance. Continue Reading
-
News
07 Apr 2023
Minority access to federal contracts needs improvement
Broadening geographic distribution of federal contracts is one way to help minority and small business access, experts said during a Brookings Institution webinar. Continue Reading
-
News
06 Apr 2023
RESTRICT Act targets IT products beyond U.S. TikTok ban
The RESTRICT Act could face implementation challenges if passed into law, given how it targets IT products owned by foreign countries, including Russia and China. Continue Reading
-
News
30 Mar 2023
The call for an AI pause points to a major concern
The call to stop creating LLMs for six months comes as AI systems become more powerful and are moving too fast. There's a need to address data and privacy concerns. Continue Reading
-
News
30 Mar 2023
Digital Markets Act could usher in big changes to big tech
The EU's Digital Markets Act will be fully in effect by March 2024. Companies that fail to comply could receive fines of up to 10% of their annual global revenue. Continue Reading
-
Feature
28 Mar 2023
Top 10 enterprise technology trends for 2023
IT investments underpin an organizational performance and help businesses gain a competitive edge. That's why CIOs and IT leaders should know the top enterprise tech trends. Continue Reading
-
News
27 Mar 2023
AWS public cloud advocate talks cloud spend, ChatGPT and ESG
In this Q&A, AWS' Mark Schwartz argues that a pure cloud future is inevitable to manage ESG compliance, test cutting edge technologies and weather economic turbulence. Continue Reading
-
News
23 Mar 2023
U.S. policymakers press TikTok CEO on China's data access
U.S. lawmakers questioned TikTok CEO Shou Chew about China's access to U.S. data and how TikTok plans to mitigate concerns about the spread of harmful content on the platform. Continue Reading
-
Definition
23 Mar 2023
project constraint
A constraint in project management is any restriction that defines a project's limitations. Continue Reading
-
News
21 Mar 2023
Tech competition with China remains top of mind for U.S.
U.S. competition with China on technology has advanced beyond legislation as the Biden administration mulls rules for limiting investments in the Chinese tech sector. Continue Reading
-
News
16 Mar 2023
FTC orders study of deceptive advertising on social media
The Federal Trade Commission has ordered eight social media companies, including Meta's Facebook and Instagram, to report on how they monitor deceptive advertising. Continue Reading
-
News
14 Mar 2023
Reasons for and effects of Microsoft cutting AI ethics unit
The tech giant has garnered much attention for integrating ChatGPT technology into its applications. However, eliminating its AI ethics unit raises questions. Continue Reading
-
Definition
14 Mar 2023
transcription error
A transcription error is a type of data entry error commonly made by human operators or by optical character recognition (OCR) programs. Continue Reading
-
News
14 Mar 2023
Silicon Valley Bank failure might further stymie tech funding
While the finance and tech sectors shuddered after the sudden demise of two tech-focused banks, financial damage appears to be contained amid general slowdown in tech funding. Continue Reading
-
Definition
14 Mar 2023
information security (infosec)
Information security (infosec) is a set of policies, procedures and principles for safeguarding digital data and other kinds of information. Continue Reading
-
News
09 Mar 2023
U.S. senators renew efforts to rein in big tech, ban TikTok
U.S. senators showed concern for national security when it comes to popular tech platforms owned and operated by foreign entities through the introduction of the RESTRICT Act. Continue Reading
-
News
06 Mar 2023
U.S. agencies look to existing rules for crypto, Web3 regulation
While the EU is considering new cryptocurrency regulation, the U.S. Securities and Exchange Commission is focused on heightening enforcement of existing rules. Continue Reading
-
News
03 Mar 2023
U.S. lawmakers renew push on federal privacy legislation
Policymakers want federal data privacy legislation limiting businesses' ability to collect data on individuals and banning targeted advertising to teens under age 17. Continue Reading
-
Tip
28 Feb 2023
How to optimize data storage governance
Data governance manages the availability, usability, integrity and security of data. Follow these best practices for governance as it relates to data storage. Continue Reading
-
Feature
22 Feb 2023
4 challenges for creating a culture of innovation
Successful technology introduction pivots on a business's ability to embrace change. CIOs need to encourage risk-taking while providing guardrails to keep deployments on track. Continue Reading
-
News
16 Feb 2023
Server prices on the rise as inflation still complicates IT
Technology products remain a mixed inflationary bag as server prices increase, storage costs decline and equipment delivery lead times complicate matters in networking. Continue Reading
-
News
16 Feb 2023
Meta/Within loss exposes FTC's struggle to make its case
In its pursuit of big tech companies, the FTC theorizes their dominance is based on acquisition of nascent companies -- a theory the agency has struggled to prove in court. Continue Reading
-
News
16 Feb 2023
Supreme Court cases could usher in changes to Section 230
Two upcoming Supreme Court cases could significantly change how Section 230, which protects social media platforms from liability for third party content, is interpreted. Continue Reading
-
Definition
16 Feb 2023
Project portfolio management: A beginner's guide
Project portfolio management is a formal approach used by organizations to identify, prioritize, coordinate and monitor projects that align with their strategy and goals. Continue Reading
-
Definition
10 Feb 2023
Big 4
The Big 4 are the four largest international accounting and professional services firms. Continue Reading
-
News
08 Feb 2023
Biden pushes big tech agenda in 2023 State of the Union
Biden wants bipartisan legislation strengthening antitrust enforcement and stopping big tech companies' collection of personal data. Continue Reading
-
Tip
08 Feb 2023
10 core features of Web 3.0 technology
Web 3.0 promises to provide what Web 2.0 can't: autonomy for content creators to monetize their own data through blockchain, decentralization, user data ownership and private keys. Continue Reading
-
News
03 Feb 2023
The accelerating use of generative AI may prompt U.S. action
Generative AI tools like ChatGPT do everything from write code to detect network vulnerabilities. But the tools also carry risks, which might spur government involvement. Continue Reading
-
Definition
03 Feb 2023
audit program (audit plan)
An audit program, also called an audit plan, is an action plan that documents what procedures an auditor will follow to validate that an organization is in conformance with compliance regulations. Continue Reading
-
News
31 Jan 2023
Calif. climate bill to require business carbon emissions data
The Climate Corporate Data Accountability Act introduced in California would require businesses to report their scope 1, 2 and 3 carbon emissions. Continue Reading
-
Tip
31 Jan 2023
5 ways Web 3.0 will impact digital marketing
If Web 3.0 can provide greater privacy, more marketing reach and better targeting, the World Wide Web's latest iteration could ease the online customer personalization problem. Continue Reading
-
Definition
30 Jan 2023
project management
Project management is the discipline of using established principles, procedures and policies to guide a project from conception through completion. Continue Reading
-
News
27 Jan 2023
Former Google CEO outlines dangers of generative AI
Mitigating risks from generative AI tools such as ChatGPT means involving humans in final decision-making and establishing guardrails. Continue Reading
-
News
26 Jan 2023
Biden calls for bipartisan legislation reining in big tech
President Joe Biden wants Section 230 and antitrust reform, as well as federal privacy regulation and transparency into AI algorithms. Continue Reading
-
Opinion
26 Jan 2023
3 data protection and governance predictions for 2023
How should backup teams prepare for a new year? Data protection pros can adjust to a changing IT landscape by keeping an eye on ransomware, data governance and compliance. Continue Reading
-
Tip
25 Jan 2023
10 benefits of adopting project portfolio management
Project portfolio management takes a centralized approach to managing projects and focuses on aligning projects with company goals. Learn how it adds value to project management. Continue Reading
-
News
20 Jan 2023
California privacy law might push online age verification
The California Age-Appropriate Design Code Act goes into effect in 2024, meaning businesses with users under the age of 18 should start preparing to comply soon. Continue Reading
-
News
19 Jan 2023
Tackling fake product reviews a challenge for FTC, states
Fake product reviews can be harmful not just to consumers, but to businesses if their product is negatively targeted by bad actors. Continue Reading
-
Tip
18 Jan 2023
Project portfolio risk management: Learn the key tenets
Project portfolio risk management is a holistic approach to managing project risk. Learn about its benefits and what can get in the way of success. Continue Reading
-
Tip
11 Jan 2023
Project vs. program vs. portfolio management
Project, program and portfolio management are related, but they represent three distinct disciplines. Learn about the responsibilities and goals of each and how they differ. Continue Reading
-
Definition
29 Dec 2022
onshore outsourcing (domestic outsourcing)
Onshore outsourcing, also known as domestic outsourcing, is the obtaining of services from someone outside a company but within the same country. Continue Reading
-
News
28 Dec 2022
Analysts name top emerging technologies to watch in 2023
When building a list of emerging technologies to watch, it's essential to also consider sustainability -- a concept gaining more momentum heading into 2023. Continue Reading