category:

Compliance

Article

Mastercard Extends Recurring Transaction End

Mastercard is reclassifying recurring donations received by nonprofits as subscriptions, effective March 21, 2023. On this date, recurring donations made with a Mastercard will be classified as “subscription services.”

Payments & Treasury Solutions
Recurring Donations Reclassification about the Mastercard Extends Recurring Transaction End
Case Study

Virginia Polytechnic Institute and State University Sustains PCI Compliance

Learn how CampusGuard helped Virginia Tech develop its policies and security awareness training and implement the technical controls required to be PCI compliant.

PCI DSS
View the Case Study about the Virginia Polytechnic Institute and State University Sustains PCI Compliance
Article

A QSA's Top Seven PCI DSS v4.0 Critical Takeaways

It’s going to take a while for the industry to fully digest it and determine impacts and best paths forward. But even a first pass over the newly-published standard shows us a few critical points.

PCI DSS
7 PCI Takeaways from a QSA about the A QSA's Top Seven PCI DSS v4.0 Critical Takeaways
Article

The Current State of Cybersecurity

Edward Ko, the Director of Information Security Services at CampusGuard sits down with Cybernews to discuss the state of cybersecurity in education, government, and healthcare and what challenges they face.

Cybersecurity
Cybersecurity State with Ed Ko about the The Current State of Cybersecurity
Article

FACTA Red Flags: Program Checklist

The FACTA Red Flags Rule applies to a wide array of organizations and is designed to prevent identity theft. Does it apply to your organization and, if so, are you compliant? Here's a list of considerations to get you started.

Red Flags Rule
FACTA Red Flags Checklist about the FACTA Red Flags: Program Checklist
Article

GLBA SafeGuard Rule Changes: It's Happening NOW!

Institutions with a strong GLBA program in place will need to prepare for some new requirements with the updated Safeguard Rule., while others may be spending the year playing catch up.

GLBA
New GLBA Requirements about the GLBA SafeGuard Rule Changes: It's Happening NOW!
Article

NIST SP 800-171 Framework Series: Risk Assessment

The recent release of the amended FTC Safeguards Rule includes a requirement for a documented (written) risk assessment that addresses criteria for evaluating security risks and threats to sensitive customer information, and describes how the identified risks will be mitigated or accepted.

NIST Framework
Risk Assessment Review about the NIST SP 800-171 Framework Series: Risk Assessment
Article

Considerations for Building a Privacy Program

Privacy is the protection of personal data from unauthorized access, as well as the right to control how that data is stored, collected, and disclosed. While data privacy, data security, and compliance most definitely overlap, they are not all the same.

Data Privacy
Privacy Program Guidance about the Considerations for Building a Privacy Program
Article

PCI DSS: Maintaining an Asset Inventory

What information should be kept within your PCI asset inventory? Although the PCI DSS isn’t highly specific outside of function/purpose, here is some information that can be helpful to document, as applicable to each system.

PCI DSS
PCI Asset Inventory List about the PCI DSS: Maintaining an Asset Inventory