category:

GDPR

Article Compliance

Internal Audit’s Role in Information Security

A large part of an Internal Auditor’s job is to keep current with regulatory standards, and ensure the executive level team is aware of any potential regulatory violations that could result in significant fines or losses.

Read More about the Internal Audit’s Role in Information Security
Article GDPR

GDPR: Updating Your Privacy Notice

The organizational privacy notice is one of the documents that must be updated to better align with the new European General Data Protection Regulation.

Read More about the GDPR: Updating Your Privacy Notice
Article NIST Framework

NIST SP 800-171 Framework Series: Access Control

Who has access, or rather who should have access, to your organizational systems and data? Organizations that handle personally identifiable information or other sensitive information types must take extra steps to ensure access to that information is closely controlled.

Read More about the NIST SP 800-171 Framework Series: Access Control
Article GDPR

GDPR: Beyond May 25

Now that May 25, 2018 has come and gone, some of the hype around the European General Data Protection Regulation (GDPR) appears to have dwindled.

Read More about the GDPR: Beyond May 25
Article GDPR

GDPR – How it Applies to Higher Education Institutions

If your organization is either offering goods or services to data subjects or monitoring the behavior of data subjects while they are located within the EU, you do qualify as a data controller under the rule.

Read More about the GDPR – How it Applies to Higher Education Institutions
Article Compliance

Incorporating PCI into your Overall Information Security Program

Once PCI DSS compliance is part of your business-as-usual, concerns about cardholder data security are reduced. But what about personal health information, or personally identifiable information like social security numbers, birth dates, addresses, etc.?

Read More about the Incorporating PCI into your Overall Information Security Program
Article Compliance

Data Breach Notification Laws: Use Them to Your Advantage

In your next budget presentation, it may be helpful to include some of the legal consequences that you can face if appropriate security controls aren’t put in place.

Read More about the Data Breach Notification Laws: Use Them to Your Advantage