I am considering using Resolver's GRC suite of products as our first actual GRC tool.  We would be replacing an end-of-life compliance management tool (Sherpa), Excel and SharePoint sites. The focus is on compliance (laws & regulations), IT Risk, IT Compliance and Internal audit.  Is anyone currently using this suite of products?  Opinions? 

Which of the following measures do you have in place to safeguard against ransomware attacks?

A recently reported security vulnerability in Microsoft's MSHTML browser engine is being detected all over the world. It affects everyone with a Windows machine of any kind, as it's based on the victim opening an infected MS document attachment. Has your organization been targeted by this attack in the last 3 months?

If you had a magic wand - what's the #1 daily business challenge you'd eliminate?

Where do HR and other non-security/IT departments fit into your insider risk management strategy/program? What role do they currently play?

How does your company handle AD accounts after a person leaves the company?  We have been changing the passwords, disabling them, and moving them to a separate OU, but I'm interested to hear if you do anything else.