Skip to content

Resources

Curated content for the risk and compliance professional: We cover the latest on cybersecurity, frameworks, risks, and compliance trends.

Show filters
All
Answers
Framework comparisons
Events
Glossary
Guides
Analyst research
eBooks
Datasheets
Pitch decks
Top GRC Analyst Unpacks the Future of GRC in Complex, Distributed & Autonomous Environments
Live Webinar

Top GRC Analyst Unpacks the Future of GRC in Compl...

Explore Future of GRC in Complex Environments with Top Analyst. Join Anthony Stevens, 6clicks CEO, in conversation with GRC expert Michael Rasmussen.

On-Demand Webinar

Delivering Hub & Spoke GRC in Distr...

On-demand Webinar

Delivering Hub & Spoke GRC in Distributed & Autonomous Business

Internationally renowned GRC analyst Michael Rasmussen has performed a deep dive on our Hub and Spoke architecture and i...
date-icon

Jan 1, 2023

location

Virtual

Register Now
Using Zero Trust Architecture to Ba...

On-demand Webinar

Using Zero Trust Architecture to Balance Cyber Security Risks

While the concept of "Zero Trust" is not new among enterprises, however, the modern workplace has changed radically in r...
date-icon

Jan 3, 2023

location

Virtual

Register Now
How Can a vCISO Help Protect Your N...

On-demand Webinar

How Can a vCISO Help Protect Your Network?

With the threat landscape growing by the hour, the role of CISO has never been more important. Yet high demand and massi...
date-icon

Jan 5, 2023

location

Virtual

Register Now
See all webinars

Latest Answers

ASD Essential 8

Who has to comply with ASD Essential 8?

What is ASD Essential 8? The Australian Signals Di...

NIST Cybersecurity Framework (CSF)

Is NIST a standard or framework?

What is NIST? NIST, which stands for the National ...

ASD Essential 8

What is the ASD Essential Eight model?

What is the ASD essential eight model? The ASD Ess...

{tableName=glossary, name=Information Security Risk Communication, description= Information Security Risk Communication is the process of exchanging information about cyber security threats and the potential risks associated with them. It involves the communication of risk information between organizations, stakeholders, and the public to ensure that everyone is aware of the risks associated with their data and systems. This communication can come in various forms, such as emails, newsletters, presentations, webinars, and more. It also includes the creation of policies and procedures to ensure that the risk information is shared in an effective and timely manner. Information Security Risk Communication is an essential part of any organization’s cyber security plan and should be regularly updated as new threats emerge., topic=null, hs_path=information-security-risk-communication}--
{tableName=glossary, name=Vendor, description= Vendor: A vendor is an individual or company that provides goods or services to another individual or company in exchange for payment. Vendors may provide goods or services directly to customers or to other businesses. They can be found in almost any industry, from retail stores to restaurants to technology companies. Vendors typically sell their goods or services to a variety of customers, and may specialize in certain areas. Vendors often work with a variety of suppliers, distributors, and other partners to ensure that their products or services are of the highest quality. Vendors also typically provide customer service and support, and may provide warranties and guarantees on their products or services., topic=[{id=97620570526, createdAt=1673040885440, updatedAt=1683947987018, path='vendor-risk-management', name=' Vendor Risk Management: A Guide to Best Practices', 1='{type=string, value=Vendor Risk Management}', 2='{type=string, value= Vendor Risk Management Guide: Learn the fundamentals of vendor risk management and how to identify, assess, and mitigate risks associated with third-party vendors.}', 5='{type=string, value=This Vendor Risk Management Guide provides a comprehensive overview of the key components of vendor risk management. It covers the fundamentals of vendor risk management, including risk identification, assessment, and mitigation strategies. It also provides guidance on the development of a vendor risk management program, including the process for selecting, onboarding, and monitoring vendors. Additionally, this guide provides guidance on the use of technology to automate and streamline the vendor risk management process. Finally, this guide provides a number of best practices for managing vendor risk and ensuring compliance with applicable regulations. With this guide, organizations can create a comprehensive and effective vendor risk management program that ensures the safety of their data and systems.}'}], hs_path=vendor}--
{tableName=comparison, name=PCI-DSS vs GDPR, description= PCI-DSS and GDPR are two important security standards that help protect sensitive data. Learn the differences between them and how to ensure compliance., topic=[{id=97620570502, createdAt=1673040885290, updatedAt=1683947890075, path='pci-dss', name=' PCI-DSS: A Guide to Meeting Security Requirements', 1='{type=string, value=PCI-DSS}', 2='{type=string, value=This guide provides an overview of the Payment Card Industry Data Security Standard (PCI-DSS) and the steps to take to ensure compliance with}', 5='{type=string, value=

This comprehensive guide provides a comprehensive overview of the Payment Card Industry Data Security Standard (PCI-DSS), a set of security standards designed to protect cardholder data and reduce the risk of data breaches. It covers the key components of the PCI-DSS, including the 12 requirements, the 6 goals, and the 6 core principles. It also provides a detailed description of the processes, technologies, and tools required to comply with the standard. Furthermore, the guide includes best practices for implementing the standard and provides resources to help organizations stay on top of the latest developments in the industry.

This guide provides a roadmap for achieving PCI-DSS compliance and maintaining a secure environment.

}'}], hs_path=pci-dss-vs-gdpr}--
{tableName=glossary, name=SOC 2 Audit, description= A SOC 2 Audit is an independent evaluation of a service provider’s information security controls and practices. It is based on the Trust Services Principles and Criteria (TSPC) developed by the American Institute of Certified Public Accountants (AICPA). The audit is performed by a third-party auditor and assesses the design and effectiveness of the service provider’s controls and processes related to security, availability, processing integrity, confidentiality and privacy. The audit also assesses the service provider’s ability to meet the TSPC criteria, which include requirements for the service provider’s technical infrastructure, data security, and customer data protection. The SOC 2 Report is a valuable tool for organizations that are looking to assess the security of their service providers and ensure that they are meeting their security and privacy requirements., topic=null, hs_path=soc-2-audit}--
{tableName=glossary, name=Cybersecurity Mesh, description= Cybersecurity Mesh is a comprehensive system of tools and strategies designed to protect networks, systems, and data from malicious cyber threats, such as hacking, malware, phishing, and other malicious activities. It is a holistic approach to cybersecurity that combines multiple layers of security measures and technologies to protect an organization’s data, networks, and systems. Cybersecurity Mesh includes both preventive and detective measures that are designed to protect an organization’s data from cyber-attacks and other malicious activities. These measures include firewalls, intrusion detection systems, encryption, authentication, and other security measures. Additionally, Cybersecurity Mesh also includes employee education and awareness programs, as well as policies and procedures designed to ensure that all employees understand and adhere to security protocols. By combining all of these measures, Cybersecurity Mesh provides a comprehensive approach to protecting an organization’s data and networks from malicious cyber threats., topic=null, hs_path=cybersecurity-mesh}--
{tableName=glossary, name=ISO/IEC Directives Part 1, description= ISO/IEC Directives Part 1 is an international standard that provides guidelines for the development, approval, publication, and maintenance of International Standards, Technical Specifications, Technical Reports, and Publicly Available Specifications. It is the main document of the ISO/IEC process for the development and publication of international standards. It outlines the roles and responsibilities of the various entities involved in the process, such as the ISO/IEC members, the ISO/IEC Technical Management Board, the ISO/IEC Central Secretariat, and the ISO/IEC Technical Committees. It also outlines the process for the development of new standards, the review process, and the publication and maintenance process. Furthermore, it provides guidance on the use of the ISO/IEC logo and the ISO/IEC copyright statement. Finally, it outlines the process for the withdrawal, revision, and amendment of existing standards., topic=null, hs_path=iso-iec-directives-part-1}--
Information Security Risk Communication

Information Security Risk Communication is the process of exchanging information about cyber securit...

Vendor Risk Management
Vendor

Vendor: A vendor is an individual or company that provides goods or services to another individual o...

PCI-DSS
PCI-DSS vs GDPR

PCI-DSS and GDPR are two important security standards that help protect sensitive data. Learn the di...

SOC 2 Audit

A SOC 2 Audit is an independent evaluation of a service provider’s information security controls and...

Cybersecurity Mesh

Cybersecurity Mesh is a comprehensive system of tools and strategies designed to protect networks, s...

ISO/IEC Directives Part 1

ISO/IEC Directives Part 1 is an international standard that provides guidelines for the development,...

eBooks

GRC Buying Guide

eBook

GRC Buying Guide

In this eBook, we have covered the GRC buying basics including: knowing when to employ a new GRC capability, baseline ex...
Download
Artificial Intelligence and Robust ...

eBook

Artificial Intelligence and Robust Content

Written by 6clicks CISO, Andrew Robinson, this eBook covers the interconnection of Artificial Intelligence and Machine L...
Download
Everything You Need to Know About 6...

eBook

Everything You Need to Know About 6clicks

Learn more about 6clicks as an organization and GRC SaaS provider including a platform overview, our solutions, a deeper...
Download
See all eBooks