Michelle Ofir Geveye

Centraleyes

Our clients often ask, “What is the difference between vulnerability scanning and penetration testing?” It’s a question that deserves attention, not only because of its frequency but also due to its critical role in shaping an organization’s cybersecurity strategy. Understanding the differences between these two assessments and when to employ ... Read More

Social media is the avenue to foster connections, nurture relationships, and amplify your brand’s voice across a global digital stage. Yet, like any powerful digital tool, it carries its risks. Don’t mistake this blog for a call to retreat into isolation; that’s rarely the solution. Instead, let’s discuss a balanced ... Read More

What are Cyber Risk Assessments? Risk assessments are a fundamental part of effective risk management and facilitate decision-making.  They are used to identify, estimate, and prioritize risk to business operations resulting from the use of information systems. What is the Purpose of a Cyber Risk Assessment? The main point of ... Read More

What is A KPI? Simply put, a KPI is a measurement to evaluate the effectiveness of individuals, teams, or entire companies. These metrics provide insights to management about the alignment of the business (or specific units or individuals) with their intended goals, as well as areas that require enhancements. The ... Read More

What is Audit Management? Audit management is the oversight, governance, and established procedures that help you manage an audit. Audits comprise several stages: preparation, execution, reporting, and follow-up procedures. Audit preparation and follow-up procedures may get overwhelming quickly if a workable audit management tool is not in place.  What is ... Read More

Governance, risk, and compliance (GRC) form the pillars upon which organizations build their operations to ensure security, resilience, and adherence to regulations. However, as IT infrastructure becomes more complex and regulations grow increasingly intricate, the traditional methods of managing the three GRC pillars are not holding up well. This is ... Read More

What are Internal Controls? Internal controls can be understood with 4 words that start with the letter ‘P’. They are the protocols, policies, processes, and practices established within an organization to ensure the reliability of operations, accuracy of (financial) reporting, and adherence to established policies and regulations.  These controls are ... Read More

The International Criminal Court (ICC) in The Hague, one of the world’s most prominent institutions dealing with war crimes, has reported a breach in its computer system this week.  The ICC detected unusual activity on its computer network, sparking immediate responses to address the cybersecurity incident. While the extent and ... Read More

Environmental, Social, and Governance (ESG) metrics have emerged as key indicators for organizations seeking to demonstrate their commitment to sustainability and responsible business practices. Through exploring ESG metrics across environmental, social, and governance dimensions, this article offers insights into how organizations can strategically use them to enhance their sustainability performance ... Read More

It’s official! PCI DSS v4.0 has made its debut. Compliance teams may find themselves feeling a mix of anticipation and déjà vu as they embark on the PCI DSS process once again. Making the transition toward compliance with PCI DSS 4.0 may seem daunting at first, but it doesn’t have ... Read More