Yasmine Dowidar

I need your help with something. How many books exist about the fine art of being more persuasive? Do they work? Whether it’s to win & influence, breach the inner circle, or just get a date, there’...

So, in Part 1 of this series I covered a few terms and the relevant documents around CM. This time I am going to talk about models for actually doing it. I will cover a few ways that federal entiti...

This is my first of a series of posts on the topic of data, data management and yes ultimately tying into Archer and GRC. But before we dive into Archer and GRC, I am going to first talk about data...

I’ve been grappling the past couple of weeks over the definition of a third party.  Typically, we would say that a third party is an organization with whom you have entered into a contract to provi...

In my last post I discussed how critically important risk taxonomy is for the success of an ERM program – the need for the organization to agree on risk-related terminology, formalizing it as part ...

If we had a cyber war with China or Russia tomorrow, would they only attack our Pentagon information systems? Or would they attack our banks and power companies at the same time? I think the answer...

Long story short an electrical malfunction caused my neighbor’s house to catch fire over the weekend. Fortunately nobody was hurt but things certainly could have turned out much worse for a few sca...

So far in this series I talked about CM documentation and CM models. What’s next?      Beginning with the assumption that you are already using NIST RMF (or possibly DIACAP if in the military spac...

Those of you that have followed Archer’s multi-lingual march around the globe already know about Archer’s core libraries we’ve previously translated into French, German, Spanish, and Japanese. I’m ...

China’s internet infrastructure was hacked this week and the story immediately made me think of one frightening scenario: What if they did this to themselves? I’m not asserting that they did, but j...