type:

Article

Check out our extensive library of blog articles to stay informed of the latest cybersecurity and compliance news and information.

Article

GDPR: Beyond May 25

Now that May 25, 2018 has come and gone, some of the hype around the European General Data Protection Regulation (GDPR) appears to have dwindled.

GDPR
Read More about the GDPR: Beyond May 25
Article

City of Atlanta Hit by Devastating Ransomware Attack

The hackers demanded $51,000 to decrypt the systems. Described by the mayor as a “hostage situation”, the city had to pull in resources from the FBI, Secret Service, and Department of Homeland Security, as well as other academic and private institutions.

Ransomware
Read More about the City of Atlanta Hit by Devastating Ransomware Attack
Article

320 Universities Targeted in Global Attack

In March, Iranian Hackers from the Mabna Institute were charged with launching attacks targeting universities, large US companies, and government agencies, and stealing information including academic research in technology, medicine, and other sciences valued at over $3.4 billion.

Cybersecurity
Read More about the 320 Universities Targeted in Global Attack
Article

Recent Breaches and Lessons Learned

Last month we saw more and more organizations fall victim to data breaches. Here is an overview of some of the larger breaches and what we can learn from them:

Cybersecurity
Read More about the Recent Breaches and Lessons Learned
Article

Structuring your Compliance and Security Team

How do you go about structuring your compliance and security team and who needs to be involved? Assembling a team responsible for developing goals, identifying relevant departments, and maintaining communication with the rest of the campus community is an essential component.

PCI DSS
Read More about the Structuring your Compliance and Security Team
Article

DFARS Cybersecurity Requirements

DFARS provides a set of basic security controls based on National Institute of Standards and Technology Special Publication 800-171 (NIST SP 800-171) that should be applied to all systems processing, storing, or transmitting this information.

NIST Framework
Read More about the DFARS Cybersecurity Requirements
Article

SSL/Early TLS: Deadline for Migration

Per the PCI DSS, all entities must have ceased use of SSL/early TLS as a security control, and use only secure versions of the protocol, after June 30, 2018.

PCI DSS
Read More about the SSL/Early TLS: Deadline for Migration
Article

What Is Network Segmentation Testing?

Learn more about network segmentation, a common practice to reduce risk by restricting access to secure networks like your cardholder data environment (CDE) from less secure networks like your student wireless.

Penetration Testing
Read More about the What Is Network Segmentation Testing?
Article

DSST Testing Centers – A PCI Concern?

When a computer workstation is used for processing payments, it must be secured to only allow access to documented and approved functions and web sites and should be segmented from the rest of the institution’s network. Here are a few of the controls that must be implemented:

PCI DSS
Read More about the DSST Testing Centers – A PCI Concern?