Compliance Focus - http://www.compliancefocus.com
Risk Management Resources
http://www.compliancefocus.com/articles/3/1/Risk-Management-Resources/Page1.html
Jim Hietala

Jim Hietala, CISSP, GSEC, is Research Director and a principal of Compliance Research Group, providing research, analysis, and consulting services in the areas of compliance, risk management, and IT security. He is also the Vice President, Security for The Open Group, where he manages all security and risk management programs and standards activities.

Jim has provided research and consulting services to organizations such as SANS, The Open Group, and a number of IT security and compliance vendors. He is a frequent speaker at industry conferences, and he recently authored a comprehensive course on IT risk management. He participates in the SANS Analyst/Expert program, having written several research whitepapers and participated in several webcasts for SANS. He has also published numerous articles on information security, risk management, and compliance topics in publications including The ISSA Journal, Bank Accounting & Finance, Risk Factor, SC Magazine, and others.

An industry veteran, he has held leadership roles at ControlPath, Avail Networks, Alternative Technologies, eSoft, Qwest, Concentric Network, and Digital Pathways. He developed and launched the industry’s first remote access VPN service (Concentric RemoteLink) and encrypting ISDN router (at Network Express), and launched a compliance and risk management software start-up in the IT-GRC market.

He holds a B.S. in Marketing from Southern Illinois University.

Blog: www.compliancefocus.com

Twitter: http://twitter.com/jim_hietala

LinkedIn: http://www.linkedin.com/in/jimhietala

Blogging focus: Compliance, Risk Management, IT Security, IT-GRC software, HIPAA, GLBA, Privacy

Jim can be reached at: jim@compliancefocus.com

 
By Jim Hietala
Published on 02/19/2008
 
Here's a list of useful websites and blogs dealing with risk management issues.

Website or Blog:

Description

Link

Security Officers Management and Analysis Project

Open Source project, developers of Security Officers Best Friend tool, Risk Assessment guide, Open Risk Model Repository (ORIMOR), Risk Management Handbook

http://www.somap.org/

Risk Management Insights

RiskAnalys.is

Developers of FAIR risk analysis model, consulting in risk management. RMI’s Blog is RiskAnalys.is.

http://www.riskmanagementinsight.com/

http://riskmanagementinsight.com/riskanalysis/

NIST Risk Management Publications

NIST publications on risk management

http://csrc.nist.gov/publications/PubsTC.html

COSO ERM Publications

COSO Enterprise Risk Management – Integrated Framework

http://www.coso.org/publications.htm

Institute of Risk Management

Risk management association

http://www.theirm.org/