monitoring risk

How to Effectively Monitor Risk & Controls: Testing vs. Metrics

In today’s organizations, risk managers are tasked with the responsibility of effectively monitoring risk.  They need to know what to monitor and how to determine if mitigation activities are effectively preventing risks from materializing. Traditionally, organizations monitor activities through Control Testing, but this provides little more than a false sense of security for organizations. A…