type:

Article

Check out our extensive library of blog articles to stay informed of the latest cybersecurity and compliance news and information.

Article

GLBA Safeguards: Third-Party Risks

Even if outsourcing services to a third-party, your organization still owns the overall compliance responsibility, and therefore must ensure all service providers are properly vetted, the appropriate contracts and agreements are in place, and the relationships are monitored and assessed on an ongoing basis.

GLBA
Read More about the GLBA Safeguards: Third-Party Risks
Article

Analog Payment Card Devices: A Thing of the Past?

If you have merchant areas that are currently using analog-connected, stand-alone payment card terminals, you may need to begin reviewing your options with your acquiring bank to determine an appropriate path forward.

Payments & Treasury Solutions
Read More about the Analog Payment Card Devices: A Thing of the Past?
Article

CMMC Above and Beyond NIST SP 800-171

Beginning in 2021, contracts offered by the DoD can specify a required level of CMMC validation in order for the recipient to be awarded the contract. The plan is to continue to slowly phase in the CMMC requirements to DoD contracts, and by 2026 all active contracts will require CMMC certification.

CMMC
Read More about the CMMC Above and Beyond NIST SP 800-171
Article

CMMC for Higher Education

For colleges and universities involved in R&D, the switch from DFARS to The Cybersecurity Maturity Model Certification (CMMC) is big news. But just what is it, what is the impact on DoD contracts, and how does it fit in with information security?

CMMC
Read More about the CMMC for Higher Education
Article

NIST SP 800-171 Framework Series: Media Protection

Requirement 3.8 of the NIST SP 800-171 outlines requirements for media protection and clearly defining within your organization what devices are allowed to store information, who is authorized to access and share media, and what methods are approved for media destruction.

NIST Framework
Read More about the NIST SP 800-171 Framework Series: Media Protection
Article

Lessons Learned: Australia NDB Report

Learn highlights and key findings from the recently released June 2020 Notifiable Data Breaches Report from the Office of the Australian Information Commissioner (OAIC).

Cybersecurity
Read More about the Lessons Learned: Australia NDB Report
Article

Cybersecurity Best Practices for Remote Learners

Schools can help mitigate ongoing cybersecurity risks by providing information security best practices within their distance learning plans. Here are some basic best practices for students that can also be shared with employees:

Working Remotely
Read More about the Cybersecurity Best Practices for Remote Learners
Article

Endpoint Device Security

Wherever they are, endpoint devices connect directly to your organization's network, so implementing a robust endpoint device security strategy is crucial to protecting sensitive information of your customers.

Cybersecurity
Read More about the Endpoint Device Security
Article

Remote Assessments

Overall, performing a thorough remote assessment achieves the same goals as an onsite engagement. Here are some key factors to consider when planning for a remote assessment.

Cybersecurity
Read More about the Remote Assessments