Blog

The SimpleRisk blog

Original content on governance, risk management, and compliance to help you build an effective GRC program.

All Blogs

Blog Date
Blog Title
Blog Author
European Regulation Is an Ecosystem, Not a Checklist
by Josh Sokol (Creator & CEO of SimpleRisk)
We're Not Going to Pretend
by Josh Sokol (Creator & CEO of SimpleRisk)
Navigating Third-Party Risk with Robust Governance
by SimpleRisk
IT Governance and Business Strategy: A CISO Playbook
by SimpleRisk
From 16 Vendor RFIs to One Assessment
by Alan Proctor (Chief Compliance Officer of SimpleRisk)
The Boardroom Battle: Justifying Security Spend
by SimpleRisk
From Chaos to Control: Centralize Your GRC
by SimpleRisk
Top 5 Tips for Building a Risk Management Plan
by SimpleRisk
Why 2025 Needs One Complete Risk Assessment
by SimpleRisk
How to Conduct a Proper Cybersecurity Risk Analysis
by SimpleRisk
SimpleRisk: Your Foundation for NIST CSF Compliance
by Josh Sokol
(Creator & CEO of SimpleRisk)
What AI Can (and Can't) Do for Control Mapping
by Josh Sokol
(Creator & CEO of SimpleRisk)
Risk Management Is Just Like Camping—But With Higher Stakes
by Alan Proctor (Chief Compliance Officer of SimpleRisk)
$1,000 Mistakes: Risk Lessons from Bear Country
by Alan Proctor (Chief Compliance Officer of SimpleRisk)
Free Security Policy Templates from SimpleRisk
by Josh Sokol
(Creator & CEO of SimpleRisk)
Third-Party Risk Lessons from the Rock Face
by Alan Proctor (Chief Compliance Officer of SimpleRisk)
Luck Isn't a Strategy: Risk Lessons from Climbing
by Alan Proctor (Chief Compliance Officer of SimpleRisk)
GRC in the Wild: When Over-Preparation Becomes the Real Risk
by Josh Sokol (Creator & CEO of SimpleRisk)
Integrate HITRUST CSF and SCF in Your GRC Strategy
by Alan Proctor (Chief Compliance Officer of SimpleRisk)
From Audit Fatigue to Efficiency with SimpleRisk
by Alan Proctor (Chief Compliance Officer of SimpleRisk)
Using AI with FAIR for Precision and Scalability
by Josh Sokol (Creator & CEO of SimpleRisk)
The River Crisis That Taught Me to Always Have a Plan B
by Alan Proctor (Chief Compliance Officer of SimpleRisk)
Annual Policy Attestation Made Easy with SimpleRisk
by Alan Proctor (Chief Compliance Officer of SimpleRisk)
Metrics That Matter: Proving Cybersecurity Value
by Josh Sokol (Creator & CEO of SimpleRisk)
Electrocuted on Thanksgiving: A Risk Management Lesson
by Josh Sokol (Creator & CEO of SimpleRisk)
ISO 27001 Compliance in 18 Months
by Josh Sokol (Creator & CEO of SimpleRisk)
Revolutionizing Risk Management: A GRC 20/20 View
by Josh Sokol (Creator & CEO of SimpleRisk)
Your GRC, Your Way: SimpleRisk's Flexible Pricing
by Josh Sokol (Creator & CEO of SimpleRisk)
Certified in 18 Months: Our ISO 27001 Journey
by Alan Proctor (Chief Compliance Officer of SimpleRisk)
Demystifying Residual Risk with SimpleRisk
by Josh Sokol (Creator & CEO of SimpleRisk)
SimpleRisk's Makeover: What's New in July 2024
by Josh Sokol (Creator & CEO of SimpleRisk)
Webinar Recap: Modeling Your Security Maturity
by Josh Sokol, SimpleRisk CEO
7 Strategies to Mature Your GRC Program
Guest Blog by Michael Rasmussen of GRC 20/20
6 Ways to Create a Repeatable, Scalable Compliance Program
Guest Blog by Michael Rasmussen of GRC 20/20
New SEC Cybersecurity Regulation – What to Know
by Alan Proctor, SimpleRisk CCO and Jeff Gall, SimpleRisk COO
How to Keep Up with Regulatory Change
Guest Blog by Michael Rasmussen of GRC 20/20
Getting Your Information Security Program Off the Ground
by Josh Sokol (Creator & CEO of SimpleRisk)
Using the CIS Critical Security Controls with SimpleRisk
by Josh Sokol (Creator & CEO of SimpleRisk)
8 Simple Ways to Effectively Launch Your GRC Program
by Jeff Gall (COO of SimpleRisk) and Ashley Swoope (Digital Marketing Director)
The Right and Wrong Way to Assess Third-Party Risk
by Josh Sokol (Creator & CEO of SimpleRisk)
Responding to Inbound Risk Assessments with SimpleRisk
by Josh Sokol (Creator & CEO of SimpleRisk)
Using the ISO 27001 Control Framework with SimpleRisk
by Josh Sokol (Creator & CEO of SimpleRisk)
5 Reasons Why SimpleRisk is Disrupting the GRC Space
by Jeff Gall, COO of SimpleRisk
The Benefits of a Common Control Framework for GRC
by Josh Sokol (Creator & CEO of SimpleRisk)
Governance 101: Back to Basics
by Ashley Swoope (Digital Marketing Director)
How To Calculate Inherent vs. Residual Risk
by Dorian Arthur (Client Success Manager)
Compliance 101: Back to Basics
by Ashley Swoope (Digital Marketing Director)
Apache Log4j (CVE-2021-44228) and SimpleRisk
by Josh Sokol (Creator & CEO of SimpleRisk)
Why Spreadsheets Are Killing Your GRC Practice
by Josh Sokol (Creator & CEO of SimpleRisk)
These CISOs GRC is Failing Them And I Know Why
by Josh Sokol (Creator & CEO of SimpleRisk)
SimpleRisk Free and Open Source vs. Fully Featured Platform
by Ashley Swoope (Digital Marketing Director)
Why SimpleRisk Doesn’t Require Professional Services
by Jeff Gall (COO of SimpleRisk)
How To: Manage Personnel Changes in SimpleRisk
by Dorian Arthur (Client Success Manager)
Risk Management 101: Back to Basics
by Ashley Swoope (Digital Marketing Director)
What is GRC-as-a-Service?
by Jeff Gall
(COO of SimpleRisk)
How SimpleRisk Can Meet Your Custom GRC Requirements
by Josh Sokol (Creator & CEO of SimpleRisk)
The OWASP Risk Rating Methodology and SimpleRisk
by Josh Sokol (Creator & CEO of SimpleRisk)
Normalizing Risk Scoring Across Different Methodologies
by Josh Sokol (Creator & CEO of SimpleRisk)
Simplifying the NIST Cybersecurity Framework with SimpleRisk
by Josh Sokol
(Creator & CEO of SimpleRisk)
SimpleRisk Stands Against Hate
by Josh Sokol
(Creator & CEO of SimpleRisk)
Risk Management for Dummies
by Josh Sokol
(Creator & CEO of SimpleRisk)
The Security of Open Source vs Closed Source Software
by Josh Sokol
(Creator & CEO of SimpleRisk)
SimpleRisk's Plan for COVID-19
by Josh Sokol
(Creator & CEO of SimpleRisk)
SimpleRisk On-Premise or Hosted: Which Is Right?
by Josh Sokol
(Creator & CEO of SimpleRisk)
What features do you want to see added to SimpleRisk?
by Josh Sokol
(Creator & CEO of SimpleRisk)
Josh Sokol Featured on the 'Dialed In' Podcast
by Josh Sokol (Creator & CEO of SimpleRisk)
There is Nothing Simple About FAIR
by Josh Sokol (Creator & CEO of SimpleRisk)
How to Perform Risk Assessments (with SimpleRisk)
by SimpleRisk
How to Manage the Evolving Risk of Bluekeep (with SimpleRisk)
by Josh Sokol (Creator & CEO of SimpleRisk)
Assessing Vendor Security Risks (with SimpleRisk)
by Josh Sokol (Creator & CEO of SimpleRisk)
Quickly Customize Your Risk Program in SimpleRisk
by Josh Sokol (Creator & CEO of SimpleRisk)
Assess Cybersecurity Maturity with the NIST CSF
by Josh Sokol (Creator & CEO of SimpleRisk)
GRC is Dead, Long Live GRC!
by Josh Sokol (Creator & CEO of SimpleRisk)
Should Vulnerabilities and Risks be Managed in the Same Place?
by Josh Sokol (Creator & CEO of SimpleRisk) and Jeff Gall (COO), with special thanks to Dorian Arthur and Bill Pennington for their help
Pricing Integrity and Why We Won't Play the Pricing Games
by Josh Sokol (Creator & CEO of SimpleRisk)
Why Management Doesn't Understand Your Security Woes
by Josh Sokol (Creator & CEO of SimpleRisk
What do Role Playing and Risk Management have in common?
by Josh Sokol (Creator & CEO of SimpleRisk)
How Does an Asset's Value Affect Your Risk?
by Josh Sokol (Creator & CEO of SimpleRisk) and Jeff Gall (COO)
The Origin of SimpleRisk - A Founder's Story
by Josh Sokol (Creator & CEO of SimpleRisk