type:

Article

Check out our extensive library of blog articles to stay informed of the latest cybersecurity and compliance news and information.

Article

Gramm-Leach-Bliley Act Compliance included in FY2018 Audits

The GLBA Safeguards Rule mandates that institutions develop a written information security program that includes the following elements:

GLBA
Read More about the Gramm-Leach-Bliley Act Compliance included in FY2018 Audits
Article

New PCI SSC Guidance on Software-based PIN Entry on COTS

The PCI SSC released new guidance regarding software-based PIN entry on commercial off-the-shelf (COTS) devices on January 24, 2018.

PCI DSS
Read More about the New PCI SSC Guidance on Software-based PIN Entry on COTS
Article

Securing E-commerce Payment Pages

Generally speaking, the safest option for e-commerce is to use a fully outsourced, PCI-compliant, third- party payment provider whose primary purpose is to securely process payment card transactions.

Third-Party Service Providers
Read More about the Securing E-commerce Payment Pages
Article

Top Five Information Security Trends for 2018

What types of risks should your organization be on the lookout for this year and what trends should you follow in order to effectively protect your data?

Cybersecurity
Read More about the Top Five Information Security Trends for 2018
Article

GDPR – How it Applies to Higher Education Institutions

If your organization is either offering goods or services to data subjects or monitoring the behavior of data subjects while they are located within the EU, you do qualify as a data controller under the rule.

GDPR
Read More about the GDPR – How it Applies to Higher Education Institutions
Article

Segmentation: Recommended by 5 out of 5 QSAs

While segmentation is not a requirement of the PCI DSS, it is generally accepted as the most effective way to separate those identified in-scope systems from those that need not be involved when adhering to PCI DSS requirements.

PCI DSS
Read More about the Segmentation: Recommended by 5 out of 5 QSAs
Article

File Integrity Monitoring

File integrity monitoring (FIM) is a security control that involves examining files to identify modification to critical system files and the who, when, and how the changes were made. Organizations will often utilize FIM to monitor files for suspicious activities or modifications, and for detecting malware.

Cybersecurity
Read More about the File Integrity Monitoring
Article

Requirement 2: Changing Vendor Defaults

Before any systems (e.g., operating systems, software, applications, point of sale terminals, etc.) are installed within your organization’s network, ensure the default passwords have been changed.

PCI DSS
Read More about the Requirement 2: Changing Vendor Defaults
Article

Beware of Holiday Scams

Research from last year revealed that organizations saw a twenty percent increase in attempted cyberattacks between November and December, with the majority of attacks beginning right around the Thanksgiving holiday.

Cybersecurity
Read More about the Beware of Holiday Scams