Skip to main content

BLOG

Original SimpleRisk content to help you be successful with your Governance, Risk Management and Compliance program.

OWASP Risk Rating Methodology

The OWASP Risk Rating Methodology and SimpleRisk

Over the years, we've received a number of inquiries about the OWASP Risk Rating Methdology with some contention around how we have integrated it into SimpleRisk. Some have questioned how SimpleRisk reaches its final risk score while others have pointed to differences in the Skill Level values. Let's delve into this somewhat contentious topic a bit deeper...

Two Plus Two Equals Five

Normalizing Risk Scoring Across Different Methodologies

If the "textbook" definition of risk scoring is Risk = Likelihood x Impact, then a Severe (5) impact and an Almost Certain (5) likelihood should have a score of 25, right?  The answer isn't quite so simple...

NIST Cybersecurity Framework

Simplifying the NIST Cybersecurity Framework with SimpleRisk

Learn how to use SimpleRisk's Import-Export and Risk Assessment Extras in order to efficiently use the NIST Cybersecurity Framework's controls to assess your organization's risks and perform a control gap analysis.

SimpleRisk Stands Against Hate

SimpleRisk Stands Against Hate

At the end of June 2020, a civil rights coalition, which includes the Anti-Defamation League (ADL) and the NAACP, launched the #StopHateforProfit campaign.  This campaign calls upon major corporations to put a pause on Facebook advertisements, citing the company's...

Risk Management for Dummies

Risk Management for Dummies

Today I had a really interesting conversation with a guy from Japan via LinkedIn.  It started with him trying to sell me...

The Security of Open Source vs Closed Source Software

The Security of Open Source vs Closed Source Software

When I first released SimpleRisk as a free tool back in March of 2013, I decided to license it under the open source ...

SimpleRisk's Plan for COVID-19

SimpleRisk's Plan for COVID-19

I've been avoiding sending out an e-mail about this since I know you all have already been inundated by e-mails ...

SimpleRisk On-Premise

SimpleRisk On-Premise or Hosted - Which Deployment Model is Right for You?

As the Information Security Program Owner at National Instruments, I spent years contemplating the answer to a ...

new features

What features do you want to see added to SimpleRisk?

Back in 2013, when I first started working on SimpleRisk in my spare time on nights and weekends, I started using a ...

KEEP UP WITH THE LATEST
PRODUCT ANNOUNCEMENTS
AND BLOG POSTS

FOLLOW US

CONTACT US