Supply Chain Security: Managing Risk Beyond Your Vendors

September 10, 2025

When it comes to third-party supply chain security, there’s a big difference between doing it and doing it right. Every vendor you work with brings their own vendors into the mix—so who truly owns the risk? In this session, we’ll explore how to identify, assess, and mitigate supply chain risks at every level without overburdening your resources. Join us to gain a clear strategy for protecting your organization from hidden vulnerabilities in your vendor ecosystem.

A Practical Approach to Choosing the Right GRC Tool

Compliance, Cybersecurity, Events, GRC, GRC SaaS

With countless GRC tools on the market, how do you know which one is the right fit for your organization? The wrong choice can lead to wasted resources and unmet security goals. In this session, we’ll walk through real-world cases, breaking down why specific tools were chosen and how they were successfully implemented. You’ll learn […]

Security Questionnaires: You Can’t Just Blame the Intern

Compliance, Events, GRC, Risk, Top Posts, TPRM

Let’s face it—no one enjoys security questionnaires. They are tedious and time-consuming, and it’s easy to question their real effectiveness in mitigating security risks, especially since they’re often a check-the-box exercise. However, in today’s digital landscape, they are unavoidable for building and maintaining trust with customers. Join us as we confront this harsh reality: despite […]

Security Awareness Training – Artificial Intelligence & Emerging Security Risks

Cybersecurity, Risk, Security Awareness

Join us for an essential Security Awareness Training session focused on the evolving landscape of Artificial Intelligence (AI) and the emerging security risks that come with it. In this session, we explore how AI is being used in everyday tools—and how it's also creating new opportunities for threat actors. This training emphasizes awareness, responsible usage, […]

Security Awareness Training – Verizon 2025 Data Breach Investigations Report

Security Awareness

In this 15-minute training, the HG team breaks down the most critical findings from Verizon’s 2025 Data Breach Investigations Report (DBIR)—and what they mean for real-world security programs. We cover the sharp rise in third-party breaches, the growing threat of GenAI misuse, and the continued dominance of ransomware and credential-based attacks. You’ll walk away with […]

The Maturity Gap: Why GRC Programs Plateau (and How to Advance)

Cybersecurity, GRC, Other, Top Posts

Most GRC programs reach a point where they stop growing—mature enough to pass audits, but not resilient enough to lead. In this session, we’ll reveal the key traits of high-maturity programs and what it takes to get there. You’ll learn how to identify your plateau, remove roadblocks, and strategically advance your organization’s governance, risk, and […]

Bridging the Gap: Why Cybersecurity Tools Alone Aren’t Enough

Events

Investing in the latest cybersecurity tools doesn’t automatically mean you’re secure. Many leaders feel the initial promise of a new solution—only to realize it’s not delivering the protection they expected. So, what’s missing? In this session, we’ll break down where the responsibility of the tool ends and where your team’s role begins. We’ll uncover why […]

Choosing the Right Cybersecurity Framework: A Practical Guide for Leaders

Events

Speakers: Cheri Hotman and Tanya WadeHosted by: Hotman Group Why Choosing the Right Framework Matters Passing an audit is no longer enough. Many organizations still treat cybersecurity as a one-time project, something to "check off" rather than an integrated, living part of their business operations. During this session, Cheri Hotman and Tanya […]

Mastering Multi-Framework Compliance: Strategies for Efficiency & Growth

Compliance, Events

Aligning with multiple cybersecurity frameworks is rarely a clean, linear process—especially when your first framework wasn’t chosen with the fifth in mind. As your organization matures, how do you avoid inefficiencies, stay compliant, and ensure a streamlined approach across frameworks? In this session, we’ll explore strategies to create efficiencies, manage overlaps, and prevent compliance gaps […]

Vulnerability Scans: Only Part of the Equation

GRC

There are two primary ways we see companies manage vulnerabilities… one of them significantly riskier than the other. Reactive strategies rely on a problem to arise before taking action. This makes reactive the riskier option of the two, hopefully for obvious reasons. Using a reactive strategy is like waiting for an electric bill to […]