type:

Article

Check out our extensive library of blog articles to stay informed of the latest cybersecurity and compliance news and information.

Article

Cryptocurrency Terminology

Here is a quick reference terminology guide to help with some of the most common terms used when discussing cryptocurrency.

Payments & Treasury Solutions
Cryptocurrency Reference Guide about the Cryptocurrency Terminology
Article

GLBA SafeGuard Rule Changes: It's Happening NOW!

Institutions with a strong GLBA program in place will need to prepare for some new requirements with the updated Safeguard Rule., while others may be spending the year playing catch up.

GLBA
New GLBA Requirements about the GLBA SafeGuard Rule Changes: It's Happening NOW!
Article

PCI DSS v4.0: Device Inspections

We take a deep dive into Requirement 9.5 in the latest PCI DSS version 4.0 and the processes your organization needs to take for compliance. Are your processes documented and are steps being taken to secure devices to prevent unauthorized access to cardholder data?

PCI DSS
Securing Your Devices about the PCI DSS v4.0: Device Inspections
Article

NIST SP 800-171 Framework Series: Risk Assessment

The recent release of the amended FTC Safeguards Rule includes a requirement for a documented (written) risk assessment that addresses criteria for evaluating security risks and threats to sensitive customer information, and describes how the identified risks will be mitigated or accepted.

NIST Framework
Risk Assessment Review about the NIST SP 800-171 Framework Series: Risk Assessment
Article

Cybersecurity Tabletop Exercises for Leadership Teams

One of the best ways to demonstrate how ready (or not ready) your teams are to respond to and handle a potential attack is to test your organization’s incident response plan through a tabletop exercise or breach simulation.

Incident Response
Common barriers for planning tabletop exercises about the Cybersecurity Tabletop Exercises for Leadership Teams
Article

Considerations for Building a Privacy Program

Privacy is the protection of personal data from unauthorized access, as well as the right to control how that data is stored, collected, and disclosed. While data privacy, data security, and compliance most definitely overlap, they are not all the same.

Cybersecurity
Privacy Program Guidance about the Considerations for Building a Privacy Program
Article

PCI DSS: Maintaining an Asset Inventory

What information should be kept within your PCI asset inventory? Although the PCI DSS isn’t highly specific outside of function/purpose, here is some information that can be helpful to document, as applicable to each system.

PCI DSS
PCI Asset Inventory List about the PCI DSS: Maintaining an Asset Inventory
Article

PCI Compliance Gotcha: Directing Customers to Labs/Kiosks

When a computer workstation is utilized for payment processing, it then falls into PCI scope and must be secured according to the PCI DSS.

PCI DSS
PCI Scope Considerations about the PCI Compliance Gotcha: Directing Customers to Labs/Kiosks
Article

NIST SP 800-171 Series: System and Communications Protection

In our continuing series highlighting the controls from the NIST SP 800-171 Rev. 2, we cover Requirement 13, System and Communications Protection, which secures any information transmitted or received by an organization at the external boundaries and key internal boundaries of systems.

NIST Framework
Security Requirements about the NIST SP 800-171 Series: System and Communications Protection