category:

Compliance

Article

PCI Compliance Gotcha: Directing Customers to Labs/Kiosks

When a computer workstation is utilized for payment processing, it then falls into PCI scope and must be secured according to the PCI DSS.

PCI DSS
PCI Scope Considerations about the PCI Compliance Gotcha: Directing Customers to Labs/Kiosks
Article

NIST SP 800-171 Series: System and Communications Protection

In our continuing series highlighting the controls from the NIST SP 800-171 Rev. 2, we cover Requirement 13, System and Communications Protection, which secures any information transmitted or received by an organization at the external boundaries and key internal boundaries of systems.

NIST Framework
Security Requirements about the NIST SP 800-171 Series: System and Communications Protection
Article

NIST SP 800-171 Series: Security Assessments

Requirement 12 of the NIST SP 800-171 Rev. 2, Security Assessment, requires a periodic assessment of the security controls in organizational systems to determine if they're effective in their application. Here are the steps your organization should follow when performing a security assessment.

Compliance
Security Assessment Steps about the NIST SP 800-171 Series: Security Assessments
Article

The Lifecycle of Third-Party Vendor Management and Security Assessments

While you may be outsourcing services and related responsibilities, the responsibility for the associated risk will always remain with your organization, so it is critical to carefully vet all vendors to ensure they are not creating security risks to your organization’s sensitive data.

Third-Party Service Providers
Third-Party Vendor Management about the The Lifecycle of Third-Party Vendor Management and Security Assessments
Article

GLBA Safeguards Rule Updates

Organizations are being encouraged to assess their current information security programs now and structure the necessary plans to achieve GLBA compliance with the amended requirements.

GLBA
Updates to the Safeguards Rule about the GLBA Safeguards Rule Updates
Article

A Security Advisor Holiday Wishlist

When a Security Advisor performs an assessment to evaluate current compliance status and identify any potential gaps, there are several things they are often looking for that will make the path to compliance less bumpy. If CampusGuard’s team of Advisors could write to Santa this year, this would be their list.

Cybersecurity
Security & Compliance Wishlist about the A Security Advisor Holiday Wishlist
Article

PCI DSS: Merchant Levels Explained

Merchant levels are based on the volume or number of card transactions for each card brand over a 12-month period. As the number of transactions increases, it makes sense that the risk of a data breach is also increasing, therefore, the fact that the PCI DSS requires additional steps to maintain and verify PCI compliance also makes sense.

PCI DSS
Methods for Attesting Compliance about the PCI DSS: Merchant Levels Explained
Article

Defining GLBA Scope in Higher Education

As colleges and universities work to review their environments and proactively implement the necessary safeguards defined within the NIST SP 800-171, determining what exactly is in scope for GLBA can be challenging. What information falls under the GLBA umbrella and where can this data be found across campus?

GLBA
GLBA Scope about the Defining GLBA Scope in Higher Education
Article

The Impact of COVID-19 on Compliance

With more urgent priorities, many organizations were forced to take a risk-based approach towards compliance. How have requirements been impacted? Have any been loosened in light of the current circumstances? Below is an updated status of some of the common compliance regulations:

Compliance
COVID's Impact on Compliance about the The Impact of COVID-19 on Compliance