The ISACA Ireland annual conference, Cultivating a Culture of Security was a smashing success this year. There were three tracks covering culture, technology and GRC topics. I was fortunate enough to deliver one of this year's keynote presentations. My keynote focused on the impact organizational culture has on an organization's ability to effectively manage risk and how to build a risk culture. I introduce a term that I coined which I call "risk hurricane". Risk hurricanes can be used to identify cultural traits that often lead to risk management disasters. Organizational culture can be very enduring yet brittle and fragile at the same time. Warren Buffet said it best, "It takes 20 years to build a reputation and 5 minutes to ruin it. It you think about that you will do things differently." Checkout my keynote presentation to learn more about organizational culture and risk hurricanes.
