type:

Article

Check out our extensive library of blog articles to stay informed of the latest cybersecurity and compliance news and information.

Article

PCI DSS: VoIP Guidance

If you have merchants accepting cardholder data over a VoIP telephone, this can unfortunately expand your organization’s PCI DSS scope. Learn what impact this will have on your PCI compliance program.

PCI DSS
Read More about the PCI DSS: VoIP Guidance
Article

Third-Party Service Provider AoCs

Requirement 12 of the PCI DSS can be found in all of the SAQs and focuses primarily on the policies and procedures each merchant should have in place, as well as the requirements for monitoring any third-party service providers that may be involved in the payment card process.

PCI DSS
Read More about the Third-Party Service Provider AoCs
Article

Data Privacy Day

Data Privacy Day is an opportunity to reflect on how we can and should protect ourselves in the modern cyber world where we increasingly work, play, communicate and socialize.

Cybersecurity
Read More about the Data Privacy Day
Article

Defining an IT Security Baseline

With your organization's information security environment constantly changing, the best way to detect a risk to your network is to establish an information security baseline using a consistent cybersecurity framework.

Cybersecurity
Read More about the Defining an IT Security Baseline
Article

NIST SP 800-171 Framework Series: Personnel Security

Part 9 of CampusGuard’s series covers each of the critical controls from NIST SP 800-171 rev.2 When performing IT security assessments, part of the engagement planning process includes providing the security committee with a list of all suggested departments and individuals that should be included in the assessment interviews.

NIST Framework
Read More about the NIST SP 800-171 Framework Series: Personnel Security
Article

VoIP Network on Campus: Impact to Your Payment Card Terminals

Traditional analog phone lines are being replaced across campus by Voice over Internet Protocol telephones, in which all phone services are provided by a network connection. This transition can have an effect on your PCI compliance program in multiple ways...

PCI DSS
Read More about the VoIP Network on Campus: Impact to Your Payment Card Terminals
Article

Web Application Pen Testing

A web application penetration test is a simulated attack on web-based software applications. This testing can identify weaknesses within the environment or be used to demonstrate the resilience of an application to attack.

Penetration Testing
Read More about the Web Application Pen Testing
Article

NIST SP 800-171 Framework Series: Maintenance

While periodic maintenance improves the overall performance of operating systems, as well as overall security, it is important to have clearly defined procedures and a maintenance schedule to manage the process.

NIST Framework
Read More about the NIST SP 800-171 Framework Series: Maintenance
Article

5 Mistakes That Will Break Your PCI Compliance Program

Your organization successfully completed a compliant SAQ and your acquiring bank has approved your annual Attestation of Compliance. Now what?

PCI DSS
Read More about the 5 Mistakes That Will Break Your PCI Compliance Program