Risk Topics

writing an industry standard


The Investment Industry Association of Canada is producing a two-document guide on evaluating cyber risk in their third party (vendor) arrangements. The "context" part that lists 20 questions by relevance was substantially written by me! Happily, I was able to continue my work after my layoff, and make the document an unadulterated version of what I had in mind without any entanglements.

© 2013 - 2019 werneburg information risk management inc.