Export Administration Regulations (EAR)

Export Administration Regulations (EAR): United States regulatory laws that govern the export and re-export of most commercial items, including “dual-use” items that can serve both commercial and military or proliferation applications. EAR is administered by the Bureau of Industry and Security under the US Department of Commerce and covers technologies such as computers, software, and […]

Extended Enterprise

Extended Enterprise: A network of associated entities that a central organization interacts with directly or indirectly, including suppliers, vendors, partners, contractors, and customers. These entities have access to certain data or systems of the central organization, thereby extending the risk landscape and necessitating the use of additional controls to safeguard assets and data.

External Audit – Audit Execution

External Audit – Audit Execution: The audit execution stage of an external audit involves the systematic investigation of processes, procedures, and systems by independent auditors. The goal is to determine whether they comply with relevant laws, regulations, standards, and policies. This stage involves data collection, interviewing staff, observing operations, and performing tests to verify information […]

ENISA (European Union Agency for Network and Information Security)

ENISA (European Union Agency for Network and Information Security): A European center of expertise for cybersecurity, established in 2004, that supports the EU and its Member States in improving their ability to prevent, detect, and respond to information security threats and cyber-attacks.

Enterprise Architecture (EA)

Enterprise Architecture (EA): A strategic planning framework that defines the structure and operation of an organization. It seeks to align an organization’s structure with its objectives, facilitating systematic analyses, design, planning, and implementation of an organization’s strategies. EA involves the detailed modeling of business processes, information flows, IT systems, and technological infrastructure. By providing a […]

Enterprise governance

Enterprise governance: A holistic and integrated approach to corporate governance, business management, and assurance. It ensures that an organization’s strategies are set effectively, that they are implemented proficiently, and that risk is managed appropriately. This approach is designed to help an organization achieve its goals while maintaining a balance between risk and reward.