The NIST Cybersecurity Framework (CSF) 2.0
The NIST Cybersecurity Framework (CSF) 2.0 provides guidance to industry, government agencies, and other organizations to manage cybersecurity risks. It offers a taxonomy of high-level cybersecurity outcomes that can be used by any organization — regardless of its size, sector, or maturity — to better understand, assess, prioritize, and communicate its cybersecurity efforts. The CSF does not prescribe how outcomes should be achieved. Rather, it links to online resources that provide additional guidance on practices and controls that could be used to achieve those outcomes. This document describes CSF 2.0, its components, and some of the many ways that it can be used.
KING V CODE ON CORPORATE GOVERNANCE FOR SOUTH AFRICA (Draft)
The King V Code on Corporate Governance for South Africa establishes a comprehensive framework for ethical and effective leadership, emphasising integrated thinking and sustainable value creation within economic, social, and environmental contexts. It defines corporate governance as the pursuit of four main outcomes—ethical culture, performance, conformance, and legitimacy—through the actions of the governing body. Critical principles include ethical leadership, balanced governing body composition, clear delegation, and robust risk and compliance management. The Code advocates stakeholder inclusivity and responsible corporate citizenship grounded in Ubuntu philosophy, guiding organisations to create value for both themselves and broader society. Governance practices are structured around steering the organisation, approving policies, overseeing management, and ensuring accountability. The Code mandates an outcomes-based, “apply and explain” disclosure approach, allowing for proportional adaptation based on an organisation’s size and complexity. It addresses essential domains: ethics, strategy, reporting, risk, compliance, stakeholder management, information governance (including emerging technologies like AI), assurance, and remuneration. Organisations are encouraged to implement leading practices, foster diversity and competence, and ensure independent oversight of committees, with transparency and continuous evaluation central to its application.
The Leader’s Guide to Owning Risks and Driving Risk Based Decision Making
This guide positions risk ownership as a core leadership behaviour, not a technical or compliance task. It urges executives to shift risk from governance ritual to delivery confidence: asking forward‑looking questions, surfacing uncertainties early, and using risk appetite to shape real trade‑offs. Leaders must send consistent signals that early escalation is valued, stop penalising bad news, and turn business reviews into tests of confidence rather than comfort. Success is evident when risks are raised before issues, appetite drives decisions, and risk‑based decision making becomes a leadership habit.
A (Re)view of the Philosophical Foundations of Strategic Management
This paper aims to review how different approaches to social inquiry (e.g. postivist, postpositivist, interpretive, postmodernist and critical theory) have been used in strategy research and how these main paradigms engage with strategy.
Evaluating and Establishing Baseline Security Requirements in Cloud Computing: An Enterprise Risk Management Approach
In today's digital age, businesses use cloud services to boost their operations exponentially. While this trend presents excellent potential, it is marred by significant concerns over the safety of data stored in the cloud. As the demand for cloud computing increases, businesses face issues ranging from data breaches and provider security to service availability and regulatory compliance.
FERMA European Risk Manager Survey Report
We are pleased to present the results of the 2022 European Risk Manager Survey. The survey has now taken place
every other year for 20 years. It represents the most comprehensive picture of views of professional risk managers
across Europe.
Risk in Focus – 2024 Survey Results
The worldwide participation in the Risk in Focus survey provides a rare opportunity to compare risk levels and internal audit planning between different regions.
Global Cybersecurity Outlook – 2025
This year’s report shines a light on
the increasing complexity of the cyber landscape, which has profound and far-reaching implications for organizations and nations. This complexity is driven by a series of compounding factors:
– Escalating geopolitical tensions are contributing to a more uncertain environment.
– Increased integration of and dependence on more complex supply chains is leading to a more opaque and unpredictable risk landscape.
Etc.
Risk Trends 2025 – IRM
Driven by the explosion of technological advancements and increasing global uncertainties, we need to look at what the key shifts in risk are and how practitioners should prepare themselves, and their organisations, for the future. The ability to anticipate and respond to these fast moving developments will be crucial for risk practitioners in 2025.
Principles for the effective Management and Supervision of Climate-related Financial Risks (BCBS)
Climate change may result in physical and transition risks that could affect the safety and soundness of individual banking institutions and have broader financial stability implications for the banking system. To address climate-related financial risks within the banking sector, the Basel Committee on Banking Supervision (BCBS) established a high-level Task Force on Climate-related Financial Risks in 2020 to contribute to the Committee’s mandate to strengthen the regulation, supervision and practices of banks worldwide with the purpose of enhancing financial stability.