writing an industry standard
the journal of Michael Werneburg
twenty-eight years and a million words
Toronto, 2017.06.14
The Investment Industry Association of Canada is producing a two-document guide on evaluating cyber risk in their third party (vendor) arrangements. The "context" part that lists 20 questions by relevance was substantially written by me! Happily, I was able to continue my work after my layoff, and make the document an unadulterated version of what I had in mind without any entanglements.