Cybersecurity and governance, risk and compliance are converging, driven by developments in technology, and shared threats.
But the two disciplines have their differences.
Governance, risk and compliance focuses on understanding risks and applying controls. Its professionals typically have a background in audit. Cybersecurity and information security take a more technical approach, and practitioners are more likely to have a technology background.
But both groups have the same goal: keeping their organisation safe. What can they learn from each other, and how can they make the best use of automation and emerging technologies? And how do they stay ahead of the new risks technology brings, especially AI?
Risk and compliance, and cybersecurity, are increasingly automated, as enterprises look for a real-time view of their risk posture.
And organisations want to move audit and compliance from systems of record, to a source of intelligence that helps the business act.
As a result, more organisations are combining cybersecurity with their compliance and broader business risk functions.
But, as Richard Marcus, CISO at Optro, formerly AuditBoard. suggests, there are other changes driving convergence too.
Organisations need to close what he describes as the ‘risk-resilience gap’.
In this CISO interview, Marcus explains why collaboration between compliance and security is vital, and how leaders need to draw on new ways of working to keep their organisations safe.
About our guest
Richard is the Chief Information Security Officer at Optro, where he leads product, infrastructure, and corporate IT security functions as well as Optro’s own internal risk and compliance initiatives.
In this capacity, he has become an Optro product power user, leveraging the platform’s robust feature set to help achieve SOC 2, GDPR, ISO 27001 certification, and many other GRC initiatives. In his spare time, he enjoys exchanging insights with his information security leader peers in the Optro community and participating in the Optro product development process.
Prior to joining Optro, Richard led global GRC at Verizon Media and Security Operations at EdgeCast Networks.
Featured image by Albrecht Fietz from Pixabay
