Subscribe

Data analysis answers risk concerns

By Candace Bosch, Conference producer
Johannesburg, 26 Jan 2015
GRC is the framework that enables the exco to provide assurance on key objectives, says CQS's Philip Tillman.
GRC is the framework that enables the exco to provide assurance on key objectives, says CQS's Philip Tillman.

Accurate and real-time data analysis is vital in order to stay on top of risk and compliance concerns.

So says Philip Tillman, MD at CQS GRC Solutions, who notes GRC is the framework that enables the executive committee (exco) and the board to provide assurance on key objectives.

Execution in isolation is not enough, as corporate scandals and inefficiencies demand organisations execute in an efficient, effective and sustainable manner, he says

Tillman will explain essential GRC requirements for every organisation at the ITWeb Governance, Risk and Compliance 2015 summit, taking place on 24 and 25 February at The Forum, Bryanston.

The importance of how to use data, where to find it and how to align it to the GRC requirements of the company will be key themes of his presentation. He will also discuss exploring data-driven GRC - how a company's data is a critical part of assurance in the GRC process, and the importance of identifying GRC requirements.

Joining Tillman at the event is Michiel Jonker, director, IT advisory at Grant Thornton. Jonker will deliver a presentation on data hoarding versus big data - the flies versus the board and its business strategy.

With more than 10 years' experience in developing IT risk management strategies for clients, Jonker will explore the importance of international data privacy best practices.

"There are two reasons organisations must consider international best practices - firstly, the Protection of Personal Information Act compels us to do it; and secondly, more and more consumers are pushing back and are reluctant to adopt technology that infringes on their privacy. By enforcing international data privacy standards, a business can, so to speak, thrill both the government and its customers."

Jonker says many people believe the myth that 100% IT security is achievable. As a result, they are unrealistic in their expectations when it comes to CIOs' key performance indicators, he adds.

ITWeb GRC 2015

At this fourth annual GRC conference, business and IT leaders will learn how to implement strategies that find the 'sweet spot' between regulations, risks and rewards within their specific enterprises. Click here to register.

He points out CIOs tend to please boards, resulting in certain aspects of IT security not receiving sufficient attention - with sometimes catastrophic consequences for customers and their privacy rights.

With this in mind, Jonker will elaborate on the importance of reconsidering traditional approaches to enforce IT security, and focus on the big security picture on big data.

He will also address the organisational practices that could lead to data hoarding: "Data hoarding increases a business' risk or exposure surface; the more data you collect and store, the greater the chances are of the bad guys coming and paying you a visit in order to take what they can, as there is a high value on certain kinds of data in the black market."

These presentations will provide delegates with groundbreaking insights, and highlight the latest trends from subject matter experts who will expose the gaps in current GRC initiatives.

Click here to find out more and register to attend.

Share