type:

Article

Check out our extensive library of blog articles to stay informed of the latest cybersecurity and compliance news and information.

Article

GLBA Safeguards Rule: Audit Compliance Objectives

CampusGuard has completed an initial review of the 2023 Audit Guide and implications related to the Gramm-Leach Bliley Act (GLBA) Safeguards Rule.

Compliance
GLBA Audit Guide about the GLBA Safeguards Rule: Audit Compliance Objectives
Article

DoE’s Third-Party Servicers: Vendor Management

The recently released Department of Education (DoE) Dear Colleague Letter (DCL) on Third-Party Servicers (TPS) would mandate institutions to report and register any third-party service providers that administer any aspect of the Title IV or student assistance program.

Third-Party Service Providers
TPS Requirements about the DoE’s Third-Party Servicers: Vendor Management
Article

GLBA Safeguards Rule: Penetration Testing Requirements

The revised Safeguards Rule specifically states that the testing process must either deploy continuous monitoring of the implemented safeguards, or include annual penetration testing and bi-annual vulnerability scanning.

GLBA
GLBA Pen Testing about the GLBA Safeguards Rule: Penetration Testing Requirements
Article

Working Remotely: 6 Ways to Secure Your Data

Having employees work from home can present various cybersecurity risks that must be evaluated and addressed. Remote employees are more susceptible to hackers, inadvertently allowing unauthorized access to organizational systems and data.

Working Remotely
6 Steps to Securing Data about the Working Remotely: 6 Ways to Secure Your Data
Article

Third-Party Vendor Breaches — Is Your Organization Prepared to Respond?

Outsourcing to a third-party vendor can shift many of the required security and compliance controls away from your organization, but you will still own the overall compliance responsibility, and a third-party breach can still have a significant impact on your organization’s customers, name, and reputation.

Third-Party Service Providers
Third-party Breach Next Steps about the Third-Party Vendor Breaches — Is Your Organization Prepared to Respond?
Article

If ______ Ran Your Information Security Awareness Program

Your organization's Security Awareness Training Program is at the core of your data security and compliance strategy. Who would be the most effective leader of your program and how would they choose to run it?

Cybersecurity
Choose Your InfoSec Program Leader about the If ______ Ran Your Information Security Awareness Program
Article

PCI DSS v4.0: Talk to Your Service Providers about New Requirements

Do you have an established third-party service provider oversight process when it comes to PCI DSS version 4.0 compliance? Learn how to ensure the appropriate due diligence is being performed prior to onboarding a vendor, and annually thereafter.

PCI DSS
New PCI DSS v4.0 Requirements about the PCI DSS v4.0: Talk to Your Service Providers about New Requirements
Article

Protecting Your Data Privacy

With the recent upsurge of data breaches, consumers are tasked with ensuring their own data privacy now more than ever. Knowing how your data is being used and actively engaging in the following steps will help protect your data privacy.

Cybersecurity
Steps to Protect Data Privacy about the Protecting Your Data Privacy
Article

6 Blogs Honoring Data Privacy Week

To celebrate Data Privacy Week, we’ve compiled a list of blog posts that embody the significance of incorporating data privacy efforts in your organization:

Cybersecurity
Data Privacy Week Blogs about the 6 Blogs Honoring Data Privacy Week