Even though execs know about major data breaches, like those at TJX Companies and Société Générale, many aren't working to control risks in their own companies. Brian Cleary, a vice president with Aveska, explains the importance of data breaches and information security risks and provides suggestions on how companies can address the problems.

GRC Primer: Managing Entitlements and Roles [1] | Source: The Big Fat Finance Blog [2].