IT Security Blog | Rivial Security

Rivial’s Cybersecurity blog

The Savvy CISO

Cybersecurity management insights, tips, and trends for security leaders, CISOs, vCISOs, and MSSPs who want to work smarter, not harder.

Vendor Management

8 min read

How to Review a SOC 2 Report in Minutes, Not Hours

Lucas Hathaway: 26 Aug 2026

A security manager at a credit union told us recently that vendor security reviews are the bane of his existence. Another opened a call by saying a...

8 min read

How to Write a Cyber Risk Appetite Statement

Lucas Hathaway: 20 Aug 2026

For CISOs, IT risk leaders, compliance officers, and the board committees they report to, a cyber risk appetite statement is the document that...

8 min read

Every Vendor Has an AI Feature. Here's How to Assess It

Lucas Hathaway: 05 Aug 2026

A risk leader at a large financial institution said something on a call this year that we have heard some version of at almost every institution...

8 min read

How to Build a Cybersecurity Risk Register

Lucas Hathaway: 24 Jul 2026

For CISOs, IT risk leaders, compliance officers, and vCISOs, a cybersecurity risk register is the single source of truth that turns scattered...

6 min read

How to Build an AI Acceptable Use Policy

Lucas Hathaway: 26 Jun 2026

For CISOs, IT risk leaders, compliance teams, and privacy and audit stakeholders, an AI acceptable use policy is fast becoming the line between...

8 min read

Vendor Due Diligence Checklist for Financial Institutions

Lucas Hathaway: 30 May 2026

For CISOs, risk leaders, compliance teams, and internal audit stakeholders at credit unions and community banks, vendor due diligence is one of the...