CIO Strategy: Page

What is prescriptive analytics?

Prescriptive analytics is a type of data analytics that provides guidance on what should happen next.

By Scott Robinson , George Lawton • June 24, 2025

What is the Risk Management Framework (RMF)?

The Risk Management Framework (RMF) is a template and guideline organizations use to identify, eliminate and minimize risks.

By Alexander Gillis, Brien Posey • June 20, 2025

U.S. senators offer perspectives on U.S. energy policy

Nuclear energy dominates the discussion among lawmakers and the tech industry as a top potential power source for AI data centers, which consume large amounts of electricity.

By Makenzie Holland • June 18, 2025

Big tech, UAE make U.S. energy investments to support AI

The Trump administration has pointed to key partnerships, including with the United Arab Emirates and U.S. tech companies, to bolster U.S. power needs to keep up with AI advances.

By Makenzie Holland • June 17, 2025

ERM implementation: How to deploy a framework and program

Enterprise risk management helps organizations proactively manage risks. Here's a look at ERM frameworks that can be used and key steps for implementing a program.

By Chris Tozzi • June 17, 2025

What is a compliance audit? (with an example checklist)

A compliance audit is critical for finding any potential compliance gaps in an organization's operations. Here's what companies can do to prepare for them.

By Paul Kirvan • June 16, 2025

How to write a risk appetite statement: Template, examples

A risk appetite statement defines acceptable risk levels for an organization. Here's what it includes and how to create one, with examples and a downloadable template.

By Chris Tozzi • June 13, 2025

Policymakers assess nuclear energy for AI data centers

Big tech vendors are recognizing the energy demands of their AI services, causing them to make significant energy investments.

By Makenzie Holland • June 12, 2025

IoT compliance standards and how to comply

To address IoT security concerns, it's critical for IT leaders to adhere to IoT compliance standards. Learn more about IoT compliance and its IT-relevant standards.

By Paul Kirvan • June 11, 2025

What is an IT strategic plan (information technology strategic plan)?

An IT strategic plan is a document that details the comprehensive technology-enabled business management processes an organization uses to guide operations.

By Mekhala Roy, Paul Kirvan • June 11, 2025

U.S. will need policy to navigate EU rules

Protecting U.S. tech companies from the EU's regulatory regime will present a challenge to U.S. officials, who have pursued antitrust cases against big tech.

By Makenzie Holland • June 10, 2025

The history of quantum computing: A complete timeline

The theories behind quantum computing go back decades, but progress has accelerated in the 2000s. Know the key milestones to get a quick understanding of how quantum developed.

By George Lawton • June 10, 2025

What is financial risk management?

Financial risk management is the continuous process of recognizing, evaluating and mitigating potential threats to an individual's or organization's financial health.

By Andy Patrizio • June 10, 2025

What is a risk management specialist, and what does one do?

A risk management specialist is a role appointed within organizations to identify potential risks that might negatively affect the business.

By Alexander Gillis, George Lawton • June 10, 2025

FTC sends message with Synopsys, Ansys divestiture order

To prevent the creation of a monopoly in software tools used to design semiconductors, the FTC wants the two companies to divest assets before merging.

By Makenzie Holland • June 6, 2025

UK backdoor order to Apple raises bipartisan concerns

U.S. officials fear that gaps in existing law may enable countries to target U.S. companies with data access requests that harm user privacy and security.

By Makenzie Holland • June 5, 2025

What is third-party risk management (TPRM)?

Third-party risk management (TPRM) is a comprehensive framework for identifying, assessing, and mitigating risks associated with using external vendors, suppliers, partners and service providers.

By Kinza Yasar • June 5, 2025

What is vendor risk management (VRM)? A guide for businesses

Vendor risk management identifies, assesses and mitigates risks from third-party vendors to protect companies from data breaches, operational disruptions and compliance violations.

By Sean Kerner • June 5, 2025

Compliance stakeholders and how to work with them

Stakeholders' involvement can strengthen an organization's compliance program. Learn best practices for engaging key stakeholders in compliance initiatives.

By Paul Kirvan • June 5, 2025

Top 5 steps in the risk management process

Implementing an effective risk management process is a key part of managing business risks. Follow these five steps to ensure a successful process.

By Greg Witte • June 5, 2025

A guide to risk registers: Benefits and examples

Risk registers document, prioritize and track an organization's risks, providing a holistic view of the risks and a ready way to communicate risk strategies.

By Mary Pratt • June 4, 2025

Learn how to harness strategic risk and improve your operations

Organizations face factors beyond their control that can prevent them from meeting their long-term goals. Learn about the building blocks behind a cohesive strategic risk strategy.

By Stephen Bigelow • June 4, 2025

What is risk monitoring? Definition and best practices

In today's complex environment, risk monitoring provides systematic identification and analysis of threats, enabling organizations to address issues proactively.

By Stephen Bigelow • June 4, 2025

What is scenario analysis?

Scenario analysis is a risk management and strategic planning process used to evaluate the risk and potential effects of a future event.

By Sean Kerner • June 4, 2025

Risk maturity model: How it works and how to use one

Explore risk maturity models and assessment tools for enhancing enterprise risk management. Improve ERM programs to mitigate risk and gain a competitive edge.

By Ben Lutkevich • June 2, 2025