Security Questionnaires: You Can’t Just Blame the Intern
December 12, 2024
Let’s face it—no one enjoys security questionnaires. They are tedious and time-consuming, and it’s easy to question their real effectiveness in mitigating security risks, especially since they’re often a check-the-box exercise. However, in today’s digital landscape, they are unavoidable for building and maintaining trust with customers. Join us as we confront this harsh reality: despite our dislike for them, we bear immense liability in ensuring they are handled with integrity and consistency. We can’t just buy a tool or hire a low-cost resource and then blame them when errors occur and cause issues with customers. Leave this chat with insights about the legal implications for your answers, how to mitigate the risks and new ways to manage the fall out.
You May Like These Posts
A Practical Approach to Choosing the Right GRC Tool
With countless GRC tools on the market, how do you know which one is the right fit for your organization? The wrong choice can lead to wasted resources and unmet security goals. In this session, we’ll walk through real-world cases, breaking down why specific tools were chosen and how they were successfully implemented. You’ll learn […]
Why Maturity Matters: Overcoming GRC Cognitive Overload with the Maturity Model
Please join Kayne McGladrey, author of the GRC Maturity Model and Cheri Hotman as they explore the GRC (Governance, Risk, and Compliance) Maturity Model, a powerful tool for organizations to assess and enhance their cybersecurity practices. Achieving maturity in GRC is crucial for navigating complex regulatory landscapes and boosting overall effectiveness. Through self-assessments, organizations can […]
Where Compliance Meets Security: Doing Both the Right Way
Compliance and cybersecurity are often seen as separate priorities—but the truth is, good compliance reduces risk when done right. So how do you effectively integrate both for a stronger security posture? In this session, we’ll break down the intersection of compliance and cybersecurity, share best practices, and walk through real-world examples of organizations that have […]
Why Cybersecurity is as much Art as Science
In this kickoff episode of The Art of Cybersecurity, host Cheri Hotman shares why this podcast exists and what listeners can expect. Cyber isn’t just science or technology — it’s art. It’s messy, constrained, people-driven, and ultimately about mitigating risk to protect people and data. Cheri cuts through the noise of “easy button” tools, audit-passing […]
The Audit Trap: Why Passing isn’t Protection
Think passing an audit means your cybersecurity program is solid? Think again. Many organizations unknowingly expose themselves to greater risk by relying on compliance checkmarks rather than a true security strategy. In this session, we’ll uncover the hidden dangers of audit-driven security, why "passing" may leave you more vulnerable, and the real steps leaders must […]
Building Customer Trust in the Digital Age: Evolution, Importance, and Observations from the Field
In today’s digital age, customer trust is more crucial than ever. Join us as we explore the evolution of customer trust, highlighting its importance in building strong customer relationships. We’ll delve into how trust became so important and some of the pivotal moments that shaped its current state. Looking ahead, we’ll discuss emerging trends and […]
Internal or External Resources? YES!
Imagine trusting a neighborhood kid to take care of your dog while on vacation. While they may be capable of completing the task you’ve outlined; they will likely only do exactly as you ask. The dog gets what they need and the job is done. In contrast, imagine trusting an adult neighbor caring for […]
Choosing the Right Cybersecurity Framework: A Practical Guide for Leaders
Speakers: Cheri Hotman and Tanya WadeHosted by: Hotman Group Why Choosing the Right Framework Matters Passing an audit is no longer enough. Many organizations still treat cybersecurity as a one-time project, something to "check off" rather than an integrated, living part of their business operations. During this session, Cheri Hotman and Tanya […]
Bridging the Gap: Why Cybersecurity Tools Alone Aren’t Enough
Investing in the latest cybersecurity tools doesn’t automatically mean you’re secure. Many leaders feel the initial promise of a new solution—only to realize it’s not delivering the protection they expected. So, what’s missing? In this session, we’ll break down where the responsibility of the tool ends and where your team’s role begins. We’ll uncover why […]
Post A Comment
Endless audits and customer demands were never supposed to replace real security.
We build, implement, and run Cyber GRC programs that reduce risk, protect the business, and still pass audits.
Hotman Group is a certified
woman-owned business (WOSB)
Hotman Group, LLC
Fort Worth, TX
Privacy Policy | Terms of Service | All Rights Reserved © Hotman Group, LLC