type:

Article

Check out our extensive library of blog articles to stay informed of the latest cybersecurity and compliance news and information.

Article

DFARS Cybersecurity Requirements

DFARS provides a set of basic security controls based on National Institute of Standards and Technology Special Publication 800-171 (NIST SP 800-171) that should be applied to all systems processing, storing, or transmitting this information.

NIST Framework
Read More about the DFARS Cybersecurity Requirements
Article

SSL/Early TLS: Deadline for Migration

Per the PCI DSS, all entities must have ceased use of SSL/early TLS as a security control, and use only secure versions of the protocol, after June 30, 2018.

PCI DSS
Read More about the SSL/Early TLS: Deadline for Migration
Article

What Is Network Segmentation Testing?

Learn more about network segmentation, a common practice to reduce risk by restricting access to secure networks like your cardholder data environment (CDE) from less secure networks like your student wireless.

Penetration Testing
Read More about the What Is Network Segmentation Testing?
Article

DSST Testing Centers – A PCI Concern?

When a computer workstation is used for processing payments, it must be secured to only allow access to documented and approved functions and web sites and should be segmented from the rest of the institution’s network. Here are a few of the controls that must be implemented:

PCI DSS
Read More about the DSST Testing Centers – A PCI Concern?
Article

Gramm-Leach-Bliley Act Compliance included in FY2018 Audits

The GLBA Safeguards Rule mandates that institutions develop a written information security program that includes the following elements:

GLBA
Read More about the Gramm-Leach-Bliley Act Compliance included in FY2018 Audits
Article

New PCI SSC Guidance on Software-based PIN Entry on COTS

The PCI SSC released new guidance regarding software-based PIN entry on commercial off-the-shelf (COTS) devices on January 24, 2018.

PCI DSS
Read More about the New PCI SSC Guidance on Software-based PIN Entry on COTS
Article

Securing E-commerce Payment Pages

Generally speaking, the safest option for e-commerce is to use a fully outsourced, PCI-compliant, third- party payment provider whose primary purpose is to securely process payment card transactions.

Third-Party Service Providers
Read More about the Securing E-commerce Payment Pages
Article

Top Five Information Security Trends for 2018

What types of risks should your organization be on the lookout for this year and what trends should you follow in order to effectively protect your data?

Cybersecurity
Read More about the Top Five Information Security Trends for 2018
Article

GDPR – How it Applies to Higher Education Institutions

If your organization is either offering goods or services to data subjects or monitoring the behavior of data subjects while they are located within the EU, you do qualify as a data controller under the rule.

GDPR
Read More about the GDPR – How it Applies to Higher Education Institutions