type:

Article

Article Penetration Testing

Going Beyond Pen Testing to Identify Zero Day Exploits

If you have merchants accepting cardholder data over a VoIP telephone, this can unfortunately expand your organization’s PCI DSS scope. Learn what impact this will have on your PCI compliance program.

Read More about the Going Beyond Pen Testing to Identify Zero Day Exploits
Article Compliance

GLBA Safeguards Rule: Audit Compliance Objectives

CampusGuard has completed an initial review of the 2023 Audit Guide and implications related to the Gramm-Leach Bliley Act (GLBA) Safeguards Rule.

Read More about the GLBA Safeguards Rule: Audit Compliance Objectives
Article Third-Party Service Providers

DoE’s Third-Party Servicers Dear Colleague Letter: Recommended Next Steps for Vendor Management

The recently released Department of Education (DoE) Dear Colleague Letter (DCL) on Third-Party Servicers (TPS) would mandate institutions to report and register any third-party service providers that administer any aspect of the Title IV or student assistance program.

Read More about the DoE’s Third-Party Servicers Dear Colleague Letter: Recommended Next Steps for Vendor Management
Article GLBA

GLBA Safeguards Rule: Penetration Testing Requirements

The revised Safeguards Rule specifically states that the testing process must either deploy continuous monitoring of the implemented safeguards, or include annual penetration testing and bi-annual vulnerability scanning.

Read More about the GLBA Safeguards Rule: Penetration Testing Requirements
Article Third-Party Service Providers

Third-Party Vendor Breaches — Is Your Organization Prepared to Respond?

Outsourcing to a third-party vendor can shift many of the required security and compliance controls away from your organization, but you will still own the overall compliance responsibility, and a third-party breach can still have a significant impact on your organization’s customers, name, and reputation.

Read More about the Third-Party Vendor Breaches — Is Your Organization Prepared to Respond?
Article Cybersecurity

If ______ Ran Your Information Security Awareness Program

Your organization's Security Awareness Training Program is at the core of your data security and compliance strategy. Who would be the most effective leader of your program and how would they choose to run it?

Read More about the If ______ Ran Your Information Security Awareness Program
Article PCI DSS

PCI DSS v4.0: Talk to Your Service Providers about New Requirements

Do you have an established third-party service provider oversight process when it comes to PCI DSS version 4.0 compliance? Learn how to ensure the appropriate due diligence is being performed prior to onboarding a vendor, and annually thereafter.

Read More about the PCI DSS v4.0: Talk to Your Service Providers about New Requirements
Article Cybersecurity

Protecting Your Data Privacy

With the recent upsurge of data breaches, consumers are tasked with ensuring their own data privacy now more than ever. Knowing how your data is being used and actively engaging in the following steps will help protect your data privacy.

Read More about the Protecting Your Data Privacy
Article Cybersecurity

6 Blogs Honoring Data Privacy Week

To celebrate Data Privacy Week, we’ve compiled a list of blog posts that embody the significance of incorporating data privacy efforts in your organization:

Read More about the 6 Blogs Honoring Data Privacy Week