type:

Article

Check out our extensive library of blog articles to stay informed of the latest cybersecurity and compliance news and information.

Article

Social Media – Defining Acceptable Use on Campus

Should employees be banned from accessing social media sites while at work? Learn social media policy best practices.

Compliance
Social Media Policy about the Social Media – Defining Acceptable Use on Campus
Article

Data Privacy vs. Data Security

The terms “data privacy” and “data security” are often confused or used interchangeably. It is important to not only understand the difference between the two, but to understand how they correlate as you are developing your information security, privacy, and compliance programs.

Data Privacy
Discover the Difference about the Data Privacy vs. Data Security
Article

Internal Audit’s Role in Information Security

A large part of an Internal Auditor’s job is to keep current with regulatory standards, and ensure the executive level team is aware of any potential regulatory violations that could result in significant fines or losses.

Compliance
Read More about the Internal Audit’s Role in Information Security
Article

Are Student Organizations Putting Your Reputation at Risk?

Student or faculty organizations that begin accepting payment cards for dues, events, or other activities may not fall directly into your PCI scope but they should be managed similar to all other merchants (e.g. required to follow University policies) to avoid having rogue merchants.

PCI DSS
P2P App Concerns about the Are Student Organizations Putting Your Reputation at Risk?
Article

Vendor Contract Language: Strengthening your Service Provider Agreements

Contracts should contain language that asserts the service provider is currently PCI compliant, will maintain that compliance, and will protect all sensitive data while in their possession. The following sections should be included in all contracts:

PCI DSS
Read More about the Vendor Contract Language: Strengthening your Service Provider Agreements
Article

Cyber Liability Insurance - Checking the Fine Print

Cyber insurance can be a valuable addition to your organization’s overall information security plan, but it is important to understand the limits of such policies when managing your risk.

Cybersecurity
Read More about the Cyber Liability Insurance - Checking the Fine Print
Article

GDPR: Updating Your Privacy Notice

The organizational privacy notice is one of the documents that must be updated to better align with the new European General Data Protection Regulation.

GDPR
Read More about the GDPR: Updating Your Privacy Notice
Article

NIST SP 800-171 Framework Series: Awareness and Training

It is critical for you to educate your users so they are aware of actions they should or should not take to better protect sensitive information. But how do you implement an effective information security awareness program?

NIST Framework
Explore Best Practices about the NIST SP 800-171 Framework Series: Awareness and Training
Article

NIST SP 800-171 Framework Series: Access Control

Who has access, or rather who should have access, to your organizational systems and data? Organizations that handle personally identifiable information or other sensitive information types must take extra steps to ensure access to that information is closely controlled.

NIST Framework
Read More about the NIST SP 800-171 Framework Series: Access Control