Security Risk, Strategy & Governance
Topics
Types of Content
Data Privacy Program RACI ChartAssign ownership to ensure the data privacy program is governed in an effective way. Leverage the Data Privacy RACI Chart to support the privacy governance model and ensure... |
|
Data Privacy Program ReportThis template outlines the operations of your organization's data privacy program by presenting specific metrics across all twelve areas of data privacy, in a digestible... |
|
Data Privacy Policy – InternalInfo-Tech's Data Protection Policy template is for internal use and ensures that data privacy best practices are supported and enforced within the organization. |
|
Privacy Analysis by Business Unit ToolA condensed version of the Data Privacy Framework, this tool emphasizes four key areas of the data privacy framework that can be applied at a more granular, business-unit... |
|
Data Protection Impact Assessment ToolTo enable effective execution of compliance to the GDPR, a Data Protection Impact Assessment should be completed for processing activities that put data subjects at risk. |
|
Data Classification Scheme Selection ToolA concise set of questions used to determine what data classification scheme might be most appropriate for your organization. |
|
Discover and Classify Your DataMany organizations struggle to keep ahead of today’s overwhelming flood of data, resulting in limited value at best, and unmitigated risks at worst. Our research offers... |
|
Black Hat 2026 Trends – Security Buyers Want Proof, Not More ToolsThe following trends reflect themes that emerged from conversations, vendor briefings, and conference sessions at Black Hat 2026, with an emphasis on what they mean for... |
|
Cisco Releases Antares: Open-Weight Models for Vulnerability LocalizationCisco released Antares-350M and Antares-1B, two open-weight small language models that locate where known vulnerabilities live inside a codebase. Both are free on Hugging... |
|
Build Security Services for Business ValueSecurity leaders often respond to emerging threats by implementing tools or controls that fail to support the organizational outcomes they are meant to enable. Use this... |
|