Questions tagged [business-risk]

The probability of loss inherent in an organization's operations and environment (such as competition and adverse economic conditions) that may impair its ability to provide returns on investment. Business risk plus the financial risk arising from use of debt (borrowed capital and/or trade credit) equal total corporate risk.

Filter by
Sorted by
Tagged with
1
vote
1answer
206 views

API Security - Mutual TLS vs TLS with shared secret .

When setting up the security for business to business API integration. We are discussion 2 option Mutual TLS with IP Filtering TLS with a Shared secret and IP Filtering. Which is the more secure ...
1
vote
1answer
85 views

How to justify a Vulnerability Research function at a company

From a business standpoint, how would you express the need for a vulnerability research team? In the end, would it be infeasible from a business standpoint unless said business chalked it up as a ...
1
vote
2answers
75 views

What app owners need to do while they resolve XSS to minimize risk?

I have submitted a pentest report in which I have reported XSS at a few locations in an application. The management agreed to the risk. They have planned to remediate the issue in the next thirty days....
1
vote
1answer
44 views

Supply chain risks

I wish to know more about supply chain risks. Does it only apply to companies which have products to sell and has suppliers and customers? Or do agencies such as a government agencies (e.g. department ...
1
vote
1answer
196 views

How to prepare a report on security weakness in our software [closed]

I am part of an in-house development team that provides the software that is used in our company's factories across the world for production as well as for order management, and which also enables the ...
1
vote
0answers
16 views

Recommended number of ssytems under an ISSO

Is there an optimum number of systems an ISSO should be responsible for? I realize system size and complexity come into play but assuming most are large and of moderate risk, etc. is there a number ...
0
votes
2answers
75 views

How to decide software flow / business process is secure enough

Most of the time when we develop a software flow to implement a business logic often we are giving some decision that effecting safe and comfortable usage of the system and maybe success of the ...
0
votes
0answers
38 views

What to do after a social engineering attack was used to trick utility services at my hypothetical business? How to close the security hole?

Business Attack Scenario Standard information that was ubiquitous through my chain-businesses was exploited by a rogue group of former employees to sabotage. They considered manipulating all ...
-5
votes
1answer
922 views

Received emails from China Company about my Business name and they want to use it [closed]

Email 1: Dear CEO, (If you are not the person who is in charge of this, please forward this to your CEO, because this is urgent, Thanks) We are a Network Service Company which is the domain name ...