type:

Article

Check out our extensive library of blog articles to stay informed of the latest cybersecurity and compliance news and information.

Article

NIST SP 800-171 Framework Series: Personnel Security

Part 9 of CampusGuard’s series covers each of the critical controls from NIST SP 800-171 rev.2 When performing IT security assessments, part of the engagement planning process includes providing the security committee with a list of all suggested departments and individuals that should be included in the assessment interviews.

NIST Framework
Read More about the NIST SP 800-171 Framework Series: Personnel Security
Article

VoIP Network on Campus: Impact to Your Payment Card Terminals

Traditional analog phone lines are being replaced across campus by Voice over Internet Protocol telephones, in which all phone services are provided by a network connection. This transition can have an effect on your PCI compliance program in multiple ways...

PCI DSS
Read More about the VoIP Network on Campus: Impact to Your Payment Card Terminals
Article

Web Application Pen Testing

A web application penetration test is a simulated attack on web-based software applications. This testing can identify weaknesses within the environment or be used to demonstrate the resilience of an application to attack.

Penetration Testing
Read More about the Web Application Pen Testing
Article

NIST SP 800-171 Framework Series: Maintenance

While periodic maintenance improves the overall performance of operating systems, as well as overall security, it is important to have clearly defined procedures and a maintenance schedule to manage the process.

NIST Framework
Read More about the NIST SP 800-171 Framework Series: Maintenance
Article

5 Mistakes That Will Break Your PCI Compliance Program

Your organization successfully completed a compliant SAQ and your acquiring bank has approved your annual Attestation of Compliance. Now what?

PCI DSS
Read More about the 5 Mistakes That Will Break Your PCI Compliance Program
Article

What to Expect from PCI DSS v4.0

According to the PCI SSC, the priorities for PCI DSS v4.0 include strengthening security and adding flexibility. The new standard will include the following:

PCI DSS
Read More about the What to Expect from PCI DSS v4.0
Article

How to Become a Pen Tester

Chad Wheeler, Manager of RedLens InfoSec shares how he hacked his way into this dream job and provides tips and resources that will help you on your journey of becoming a penetration tester.

Penetration Testing
Read More about the How to Become a Pen Tester
Article

Security Awareness: Is There Such a Thing as Too Much Training?

Security awareness training is one of the most cost effective ways to strengthen your information security program, and clearly the need to improve awareness around information security and privacy still exists, but what is the best way to do this?

Online Training
Too Much Training? about the Security Awareness: Is There Such a Thing as Too Much Training?
Article

HIPAA vs. FERPA: High Level Guidance for Higher Ed

Colleges and universities maintain medical information in various ways and locations. While this personal information does indeed need to be protected, not all of those guidelines fall under HIPAA.

Higher Education
Read More about the HIPAA vs. FERPA: High Level Guidance for Higher Ed