Skip to main content

Conversations

Interact with your peers and engage in discussions

91 Topics
C
Claudia.SantosReady to engage in the Community
asked in General
ISO 27002:2022 Seed content registry

Hello Team! Any news on when we will have available the seed registry for ISO 27002:2022?

6
libby.bevin
Community Manager
{n1 year} year ago
libby.bevin
Community Manager
libby.bevinCommunity Manager
posted in General
Best Practice Guide: Using Automation to Transform Risk Management

Download our latest ebook for best practice tips to develop a proactive risk management strategy. This guide covers creating a strategy that encompasses:Compliance Cybersecurity Risk Management Automating Identification, Detection, and Response Always-on risk monitoringGET THE GUIDE

0
libby.bevin
Community Manager
{n1 year} year ago
libby.bevin
Community Manager
libby.bevinCommunity Manager
posted in General
5 FREE copies left of 'The Basics of Information Security' by Jason Andress

The first five customers to comment on @reciprocitydevin’s Recommended Reading posts get a free copy of the book mailed to them. Check out the latest post about The Basics of Information Security by Jason Andress!GET A FREE COPY OF THE BOOK

0
libby.bevin
Community Manager
{n1 year} year ago
triciascherer
Employee
triciaschererEmployee
published in General
Average cost of healthcare security breach now over $10 million

An article from Cybersecurity Dive shares the perils of healthcare breaches, with the average cost jumping from $1 million last year to over $10 million per breach this year. The article explains that healthcare payment processing firms are “particularly vulnerable to information technology breaches and ransom demands.” Two fintech firms have already been hit since the beginning of July, causing the exposure of nearly three million patients’ data. Having a strong risk management is vital. Read the article to learn more. READ THE ARTICLE   

51
libby.bevin
Community Manager
{n1 year} year ago
Vince4436
Novice
Vince4436Novice
asked in General
Audit Requests in Jira

I have a Jira managed audit that I am trying to add additional requests to via the “Jira Issue” import request template. When I select the csv file I get “1 rows (0 deleted, 1 created, 0 updated, 0 ignored)”But then after the file uploads I get “0 requests imported successfully.” and I have no external requests available. I can’t figure out what I need to do to get more requests added to the audit.

2
Vince4436
Novice
2 years ago
P
Novice
pnholeNovice
asked in General
Role in ZenGRC

Good evening community members. This is my first question ever on this platform. I am using Zen for around a year or so. I have a user based for which I need to give read permissions to EVERYTHING (that I can achieve by using the Reader role), additionally I also need to give them permissions to update some of the objects ( I can do this by using the Contributor role). Unfortunately I haven’t found a way to give permissions to read everything plus modify permissions if one is owner of the object. Any suggestions? 

4
SeanM
Apprentice
2 years ago
libby.bevin
Community Manager
libby.bevinCommunity Manager
posted in General
Reciprocity Announces $60M Growth Investment from Francisco Partners

We have a very important announcement from our CEO, Michael Maggio! See below to read the message Michael sent out to customers: Dear Reciprocity Community,Today, I am thrilled to announce that Reciprocity raised a $60M strategic growth investment from Francisco Partners, a leading global investment firm that specializes in partnering with technology businesses.This round of funding, raised on the strength of the Reciprocity ROAR™ Platform and our vision as a company, is a foundation for the long term and enables us to serve you better and faster. This new capital will accelerate our product innovation, offer new levels of functionality and deeper intelligence with our technology, and increase investments in resources that will help you achieve your desired outcomes more quickly.“As Reciprocity enters its next phase of growth, we are excited to partner with the team and help scale the business to serve the needs of CISOs and business leaders,” said Peter Gingold, Managing Director at F

0
libby.bevin
Community Manager
2 years ago
T
Tramdass
asked in General
Audit Summary Dashboard

Hello Everyone,    With in the My Dashboard section of ZenGRC (not ROAR) I was wondering if there is a way to create a box that will show all requests with new comments (so any request with the orange talk bubble? 

4
libby.bevin
Community Manager
2 years ago
libby.bevin
Community Manager
libby.bevinCommunity Manager
posted in General
Product Sprint Review Recording: Our product managers' top 5 focus areas for Q3

Missed today’s Product Sprint Review? Watch the session recording.In this session, Reciprocity’s Director of Product Management and his team shared the latest progress in ROAR based on their top focus areas, including the new organization onboarding flow and organization-level connectors.The product team is working diligently to build out robust, intuitive functionality in the ROAR platform. Sprint reviews allow you to see what’s going on as it happens and provide feedback. Keep an eye on the Events section of the Community to register for September’s Sprint Review! We’d love to hear your feedback!

0
libby.bevin
Community Manager
2 years ago
libby.bevin
Community Manager
libby.bevinCommunity Manager
posted in General
Take a few minutes to provide valued feedback to our product leaders

Did you know the organizational onboarding feature in ROAR lets you set up your ROAR environment in just a few clicks?Join our Product Sprint Review tomorrow to see our Product Management Team showcase the upcoming organizational onboarding feature and additional developments planned for Q3. It’s just 30 minutes out of your day, but it’s a great chance to provide valued feedback on ROAR product development!🦁 REGISTER NOW 🦁Time: Thursday, August 25th at 8am PDTDuration: 30 minutes🦁 REGISTER NOW 🦁

0
libby.bevin
Community Manager
2 years ago
libby.bevin
Community Manager
libby.bevinCommunity Manager
posted in General
This Month's Top Community Content

Are you getting the most out of the Community? We post new content in the community each day, whether it’s support articles, community posts, events, or product updates. Keep an eye on the Recently Active Topics section of the home page to get the latest community content. Here’s the most-viewed community content this month:ROAR Release Notes_v.22.8.1 Program Scoping and De-Scoping Risk Reporting Dashboard Understanding the Power of Cyber Assurance Programs Get Help from the Reciprocity Team

1
J
Novice
2 years ago
dave.schmoeller
Employee
dave.schmoellerEmployee
published in General
GRC Weekly Digest: Last chance for this event giveaway + new resources

Can’t-Miss Swag for GRC Conference AttendeesPsst… You’re just 3 easy steps away from scoring a super-insulated Yeti tumbler at next week’s GRC Conference. DOUBLE SCORE: automate and accelerate your SOC 2 compliance prep with a free trial of our software!Sign up for a free trial of the Reciprocity ROAR Platform (no credit card required & unlimited time to explore) Take a screenshot of your “welcome to the community” email Visit us at booth #315 and show your pic to get your free, super-insulated Yeti tumbler!*     *Void where prohibited, while supplies last. BONUS: Sign-up at our booth for a full-feature demo to get your ROARie plush — AND you’ll be entered to win a Yeti cooler!🦁 DON’T MISS OUT Get the Download: 5 Essential Steps to Improving Your Third-Party Risk Profile  It's been getting a lot of play lately, yet it's nothing new — third-party risk remains one of the biggest ways your organization can be exploited. If attending a webinar on the topic isn't for you, take a peek a

212
dave.schmoeller
Employee
2 years ago
dave.schmoeller
Employee
dave.schmoellerEmployee
published in General
GRC Weekly Digest: The NEWEST cyber attacks - are you ready for them?

LAST Chance: Don't Miss These 5 Expert Ways to Cut Your 3rd-Party RiskIf you want to learn how to put risk in its place while optimizing your third-party relationships, then this is a can't-miss session. You'll get premier access to the pro tips of our Director of Technical Product Management, Meghan Maneval — and the opportunity to ask follow up questions. Don't miss out, join us on 8/17. DON’T WAIT TO REGISTER[Employee Spotlight] Helping to Pioneer a New Approach to Risk Management From time to time, we like to highlight some of our exceptional employees. This week the spotlight is shining on Reciprocity Technical Product Manager, Nick Brown. He plays a vital role in our organization as a touch point between product development, marketing, and our customers. Read on and learn more about Nick's non-traditional path to this pivotal role.MEET NICKThe Cybersecurity Threat Landscape is Evolving: Can You Keep Up? Speaking of Nick, he's just written a blog focused on the newest evolution of

40
dave.schmoeller
Employee
2 years ago
libby.bevin
Community Manager
libby.bevinCommunity Manager
posted in General
This Week's Content Roundup: Don't leave your fellow users hanging!

Happy Friday, everyone! Here’s a roundup of some of our posts from this week: A couple of Reciprocity Community users asked their fellow users (you!) a question. Don’t leave them hanging! Let them know your answer in the comments of their posts:Has anyone mapped the 52 Microsoft supplier data protection requirements to SCF controls? Has anyone created a questionnaire template that aligns with CISA’s Vendor SCRM template?Check out other content that was released this week in the Community:A new blog from our Director of Technical Product Management: Making the Shift From Vendor Risk Management to TPRM The recording and slides from this month’s Ask the Experts event, Improving Auditing Through Automation An article explaining the ROAR user role of Risk Assessment OwnerThere’s new content being added to the Community all the time. Keep an eye on it on the Community home page, under Recently Active Topics. Reach out if you have any questions! 

2
libby.bevin
Community Manager
2 years ago
libby.bevin
Community Manager
libby.bevinCommunity Manager
posted in General
What's missing from the Knowledge Base?

We’d love to know what help articles and Knowledge Base topics you feel are missing. We want to build out content that is relevant and helpful to you!Comment on this post with any topics you’d like to see added to the Knowledge Base.

1
J
Novice
2 years ago
Vince4436
Novice
Vince4436Novice
asked in General
Multiple Control Owners

I know other must have this challenge.What’s the best way to handle controls with multiple owners in ZenGRC? For example an asset inventory control. One team manages the asset inventory around workstations, and another team manages the server or software inventory. How can I utilize a single control like AST-02 and have multiple control owners?

1
SeanM
Apprentice
2 years ago
Vince4436
Novice
Vince4436Novice
asked in General
Microsoft Supplier Data Protection Requirements

Has anyone mapped the 52 Microsoft Supplier Data Protection Requirements to SCF controls?

1
M
2 years ago
A
Anonymous
asked in General
Import Email Template

Is it possible to import an email template? I have many templates to create based of an existing one.  

3
libby.bevin
Community Manager
2 years ago
spacemonkey75
spacemonkey75Ready to engage in the Community
asked in General
Customization of codes

Hello! I’m pretty new here, at this moment I’m uploading my risk register and I need help to understand how can I customize the codes, I been swept all the Learning Platform but I didn’t find anything that can be usefull.Thank you in advance.

1
libby.bevin
Community Manager
2 years ago
libby.bevin
Community Manager
libby.bevinCommunity Manager
posted in General
The Reciprocity team is growing!

You love Reciprocity, right? I thought so. If you’d like to consider joining the team as an employee, check out our Careers page. Fun fact: our Director of Technical Product Management is a former Reciprocity customer!

0
libby.bevin
Community Manager
2 years ago
dave.schmoeller
Employee
dave.schmoellerEmployee
posted in General
Don't miss it: 6-step guide to evaluating GRC Tools

Expert Tips to Prepare for PCI DSS v4 [New Webinar]Rampant skimming attacks? PCI DSS v4 covers prevention. Greater flexibility and control? PCI DSS v4 offers both. It’s a regulatory overhaul, and officials are urging you to prepare “as early as possible.” See how long you really have (and how to get a head start) in our NEW webinar on June 21. Don't miss it!GET AN INSIDER LOOK Hot Off the Presses: Game-Changing Reciprocity ROAR Platform is Available for FREE TrialThis week we officially announced to the press that our game-changing new Reciprocity ROAR Platform is available for a free trial. The Reciprocity Community Edition offers companies the ability to identify and take action on IT and cyber risks in the context of their business, with unlimited time to set up a program and explore the platform. Get the details in the full, quick-read press release below.2 MIN READ HERE An Ultimate Guide to Evaluating GRC Tools — 6 Steps for SuccessYou perform due diligence before working with new

0
dave.schmoeller
Employee
2 years ago
dave.schmoeller
Employee
dave.schmoellerEmployee
posted in General
5 Steps to Data Security Utopia + an Exclusive Offer for RSA Conference Attendees

EXTRA, EXTRA: freebies calling your name at the RSA Conference!Do you like ice-cold drinks in the summertime? If you're planning on being at RSAC in June, we'd love to help you achieve your optimal beverage temperature. Get a free Yeti tumbler in 3 easy steps:Sign up for a FREE trial of the Reciprocity ROAR Platform (no credit card required & unlimited time to explore) Take a screenshot of your “welcome to the community” email
 Visit us at booth N-4615 and show your pic to get your free, super-insulated Yeti tumbler!*Void where prohibited, while supplies last.GET STARTED HERE Where the Cyber-Risk Industry Remains DividedData security. You need it to scale. But most cyber-risk pros can’t agree on how to get there: pre-built risk registers; internal surveys; annual risk assessments; mathematical equations; spreadsheets. What’s the TRUE road to risk management utopia? Take your first 5 steps in the right direction.TAKE 5 STEPS Change Your Risk Conversation with the C-SuiteStill bringi

1
libby.bevin
Community Manager
2 years ago
gianna.satriano
gianna.satriano
published in General
Join us for a fireside chat about the changing role of the CISO - May 12, 2022

FROM THE BACK OFFICE TO THE BOARDROOM: EXECUTIVES DISCUSS THE ROLE’S EVOLUTION Increasingly since the global pandemic struck in 2020, the world is being exploited by cyber criminals. This has resulted in a record number of ransomware attacks and data breaches globally — and shows no signs of slowing.As these threats and the security landscape continue to evolve, the role of the CISO is also changing. Once a back-office “doer,” the CISO has now become a communicator and influencer to the C-suite. Their new mission: to ensure the organization understands the implications of business opportunities to IT and cybersecurity, balancing risk with opportunity.Join Reciprocity customer, Harpal Harika from Healthpilot, and Rob Ellis and Scott McCormick from Reciprocity as they discuss:  The forces driving the security leadership role’s evolution Challenges security leaders face today Steps to help elevate your influence and succeed in the roleDate & Time: May 12, 2022 @ 10:30 AM PSTREGISTER N

100
gianna.satriano
2 years ago
libby.bevin
Community Manager
libby.bevinCommunity Manager
published in General
New Training: Reciprocity ROAR Platform tour available to ROAR customers

Are you a customer of the Reciprocity ROAR Platform yet? If so, we have new training available for you in Reciprocity University. Head to the University for a tour of ROAR to get you started with the platform.Not a ROAR customer yet? Check out Reciprocity University for ZenGRC trainings built by our in-house eLearning Expert.

210
libby.bevin
Community Manager
2 years ago
libby.bevin
Community Manager
libby.bevinCommunity Manager
published in General
The Imperative of Managing Risk in Business Context

Cybersecurity investment is broken.Why? Because it’s been approached as a technical issue, not a business issue. Two recent blogs by Gartner® validate Reciprocity’s strategic approach to managing IT and cyber risk in the context of business priorities and outcomes. Read both blogs as well as a follow-up Reciprocity blog authored by Reciprocity CEO Michael Maggio.The original Gartner blog post, Cybersecurity as a Business Decision: A Manifesto Gartner’s follow up blog post, Use Value to Govern Cybersecurity as a Business Investment Reciprocity’s response blog post, The Imperative of Managing Cyber Risk in Business Context

160
libby.bevin
Community Manager
2 years ago

Badge winners

Show all badges
Terms & ConditionsCookie settings
I'm not ready yet X