The Impact of COVID-19 on Compliance
With more urgent priorities, many organizations were forced to take a risk-based approach towards compliance. How have requirements been impacted? Have any been loosened in light of the current circumstances? Below is an updated status of some of the common compliance regulations:
Overlapping Cybersecurity Frameworks and Compliance Standards
It can be helpful to take a step back from the individual checklists and shift from focusing on compliance to focusing more holistically on information security. One way to standardize and build a roadmap for your enterprise information security program is through the use of an industry cyber security framework.
Article NIST Framework
NIST SP 800-171 Framework Series: Access Control
Who has access, or rather who should have access, to your organizational systems and data? Organizations that handle personally identifiable information or other sensitive information types must take extra steps to ensure access to that information is closely controlled.