140 articles · page 2 of 3
HelpNet Security, Monday, June 2nd, 2025
32% of security professionals think they can deliver zero-vulnerability software despite rising threats and compliance regulations, according to Lineaje. Meanwhile, 68% are more realistic, noting they feel uncertain about achieving this near impossible outcome.
more →
Search CIO, Wednesday, May 28th, 2025
A compliance framework is a structured set of guidelines that details an organization's processes for maintaining accordance with established regulations, specifications or legislation.
more →
ComputerWeekly, Wednesday, May 28th, 2025
We look at the areas of risk in artificial intelligence. Potential exposures abound, and include security and privacy issues, bias, accuracy and complete fabrication of results
more →
Security Boulevard, Thursday, May 8th, 2025
Why Are PCI Costs Rising in 2025?
more →
Security Boulevard, Tuesday, April 29th, 2025
Adopting cloud computing allows organizations of all shapes and sizes to access data and collaborate in the most flexible ways imaginable. While it brings many benefits, it also brings along compliance issues in data governance, particularly when data crosses borders. Ensuring data is safe, private and organized is paramount.
more → CIODIVE, Monday, April 28th, 2025
IT leaders must consider the legal implications of potential use cases in order to rein in risks.
more →
Security Boulevard, Thursday, April 24th, 2025
Organizations managing multiple regulatory frameworks need systems that can quickly uncover the right evidence at the right time. How well you retrieve relevant information directly affects your audit outcomes, risk profile and ultimately, your organization's reputation.
more → Gartner, Wednesday, April 23rd, 2025
Nearly All Relationship Owners Spot One or More TPRM Red Flags Annually, but Only Around Half Share with Compliance Teams
more →
Help Net Security, Tuesday, April 22nd, 2025
Only 29% of all organizations say their compliance programs consistently meet internal and external standards, according to Swimlane.
more → Security Boulevard, Friday, April 18th, 2025
It's a well-acknowledged fact, isn't it, that our reliance on cloud services has significantly increased in the past few years?
more → Security Boulevard, Thursday, April 17th, 2025
Staying compliant with data privacy laws-like General Data Protection Regulation (GDPR)-is no longer just a checkbox exercise.
more → Analytics Insight, Monday, March 31st, 2025
Compliance training significantly impacts a business's operation and protects its employees against challenges and risks at work.
more →
Security Boulevard, Thursday, March 27th, 2025
How Can Non-Human Identities Improve Access Control Compliance?
more → Security Boulevard, Thursday, March 27th, 2025
Is Your NHI Management GDPR Compliant?
more → Security Boulevard, Tuesday, March 25th, 2025
Two-factor authentication (2FA) and multi-factor authentication (MFA) both add at least one additional step to the authentication flow by requiring more than one way to prove a user's identity.
more → Sustainability and ESG, Monday, March 24th, 2025
Sustainability pressure will continue to grow -- despite headlines that suggest otherwise -- and smart business and IT leaders understand how to use new tech to help meet demands.
more → TechStrong ITSM, Monday, March 24th, 2025
In corporate transactions, IT due diligence is critical yet often underestimated. A company's IT infrastructure, security framework and data management practices can greatly impact the success or failure of a deal.
more →
CIO, Tuesday, March 18th, 2025
With an ever-changing regulatory landscape, organizations may need a trusted partner to help them implement the security measures required to stay in compliance.
more →
Architecture and Governance, Monday, March 10th, 2025
Organisations are deploying multiple AI initiatives that have the potential to transform operations, drive innovation, and enhance competitiveness.
more →
Security Boulevard, Wednesday, March 5th, 2025
Security compliance management involves an organization's proactive measures to protect its assets while adhering to internal security standards and regulatory requirements.
more → HelpNet Security, Wednesday, February 26th, 2025
For many CISOs, compliance can feel like a necessary evil and a false sense of security. While frameworks like ISO 27001, SOC 2, and PCI DSS offer structured guidelines, they don't automatically equate to strong cybersecurity.
more → RTInsights, Monday, February 24th, 2025
Automation, AI, and more can help organizations make improvements that translate to faster, more accurate, and more scalable GRC processes.
more →
Security Boulevard, Tuesday, February 18th, 2025
Measuring the Effectiveness of Cyber Security GRC
more → Security Boulevard, Tuesday, February 4th, 2025
Keeping your head in the clouds might sound dreamy, but managing compliance up there doesn't quite hit the same.
more → Security Boulevard, Thursday, January 30th, 2025
Why is Secure Secrets Vaulting a Critical Factor?
more → Security Boulevard, Thursday, January 30th, 2025
Cybersecurity GRC: Harnessing a Holistic Approach
more → Security Boulevard, Thursday, January 30th, 2025
Advancements in digital security manifest as a double-edged sword. While they provide efficient tools to safeguard sensitive data, they concurrently create complex cybersecurity challenges. This conundrum brings us to an important question: How can proactive measures enhance cloud compliance?Advancements in digital security manifest as a double-edged sword. While they provide efficient tools to safeguard sensitive data, they concurrently create complex cybersecurity challenges. This conundrum brings us to an important question: How can proactive measures enhance cloud compliance?
more → Security Boulevard, Tuesday, January 28th, 2025
Protecting sensitive data is critical for businesses of all sizes. Organizations face increasing pressure to comply with stringent regulations while safeguarding against cyber threats.
more → SC Media, Tuesday, January 28th, 2025
Compliance is no longer a theoretical or strategic area of coverage, but rather a clear-and-present threat for businesses.
more →
Security Boulevard, Friday, January 24th, 2025
What is GRC in cybersecurity, and why does it matter? GRC stands for Governance, Risk, and Compliance, a helpful framework that integrates policies, risk management strategies, and compliance standards to help security managers maintain an organized and successful security program.
more → Search Security, Friday, January 24th, 2025
Organizations that use the cloud face stiff challenges in complying with data sovereignty laws and regulations. The first step: Understand which laws apply.
more → Tripwire, Monday, January 20th, 2025
Remote work isn't just a temporary trend anymore; it has become a permanent fixture. What began as a quick response during the pandemic has evolved into the new normal for businesses worldwide. In America, 20% of people now work from home.
more →
ComputerWeekly, Friday, January 17th, 2025
We look at the new EU regulation for cyber resiliency, the role of IT asset management in auditing and third-party risks
more → Security Boulevard, Monday, January 13th, 2025
The financial services industry is arguably one of the most highly regulated sectors worldwide.
more → Technative, Thursday, January 9th, 2025
As we approach 2025, financial institutions across the EU face the challenge of complying with the Digital Operational Resilience Act (DORA), which is set to take effect on the 17th of January.
more →
Security Boulevard, Tuesday, January 7th, 2025
In the world of cybersecurity, compliance is a no-brainer.
more → Security Boulevard, Saturday, December 21st, 2024
Why Do Robust Cloud Compliance Tactics Matter?
more → Security Boulevard, Tuesday, December 17th, 2024
The increasing adoption of cloud technologies in various industries, from healthcare to financial services, makes the question of stability in cloud compliance and security a top priority.
more → Security Boulevard, Monday, December 9th, 2024
You're in the middle of an audit, and it's the usual drill: toggling between spreadsheets, email chains, and access logs, while your fingers automatically find Ctrl+PrtSc to grab evidence for auditors. The back-and-forth is relentless-'Can we get timestamps on this?' or, 'Where's the proof this control was implemented before the deadline?'
more → Security Boulevard, Monday, December 9th, 2024
Are we fully conscious of the significant correlation between compliance and cloud security? With the increasing reliance on cloud-based solutions, the challenge of maintaining security compliance in the cloud environment has become a pivotal concern for organizations across multiple sectors.
more → HelpNet Security, Friday, November 29th, 2024
In this Help Net Security interview, Steve Carter, CEO of Nucleus Security, discusses the ongoing challenges in vulnerability management, including prioritizing vulnerabilities and addressing patching delays.
more → Search CIO, Wednesday, November 27th, 2024
Compliance risk is an organization's potential exposure to legal penalties, financial forfeiture and material loss, resulting from its failure to act in accordance with industry laws and regulations, internal policies or prescribed best practices. Compliance risk is also known as integrity risk.
more → Security Boulevard, Monday, November 25th, 2024
Department of Defense (DoD) data is some of the most sensitive out there. That's why the DoD designed the Cybersecurity Maturity Model Certification (CMMC) framework. It helps software providers implement cybersecurity measures to protect controlled information.
more → Security Boulevard, Monday, November 25th, 2024
Vanta was developed to help organizations achieve SOC 2 compliance quickly. Compliance management platforms have gained significant traction in the market. For startups and smaller businesses, these certifications are often crucial for breaking into markets where enterprise clients expect certain compliance standards as baseline requirements.
more → Security Boulevard, Monday, November 11th, 2024
Organizations devote significant resources to their compliance risk assessments each year. Yet many compliance leads and senior executives feel stuck in a cycle of repetition and question whether these efforts yield meaningful benefits.
more → Security Boulevard, Monday, November 4th, 2024
In today's fast-paced business world, companies juggle numerous responsibilities-from meeting customer demands to navigating complex regulations. One crucial area that's often misunderstood but incredibly important is enterprise compliance.
more → Analytics Insight, Wednesday, October 30th, 2024
For large tech companies, implementing GDPR compliance means substantial investments in infrastructure, data security, and personnel
more → Security Boulevard, Tuesday, October 29th, 2024
If you process credit card payments, you need to prioritize security. One way to guarantee this safety is by complying with Payment Card Industry (PCI) Data Security Standards (DSS).
more → Security Boulevard, Tuesday, October 29th, 2024
If your business processes credit card transactions, it needs to meet the Payment Card Industry (PCI) Data Security Standards (DSS).
more → Gartner, Wednesday, October 16th, 2024
Due to widely varying government, risk, and compliance (GRC) tool pricing, enterprise risk management (ERM) leaders must understand four different pricing-tier categories of GRC solutions and apply a scoping framework to further estimate likely costs ahead of vendor selection, according to Gartner Inc.
more →