150 articles · page 3 of 3
HelpNet Security, Friday, November 29th, 2024
In this Help Net Security interview, Steve Carter, CEO of Nucleus Security, discusses the ongoing challenges in vulnerability management, including prioritizing vulnerabilities and addressing patching delays.
more →
Search CIO, Wednesday, November 27th, 2024
Compliance risk is an organization's potential exposure to legal penalties, financial forfeiture and material loss, resulting from its failure to act in accordance with industry laws and regulations, internal policies or prescribed best practices. Compliance risk is also known as integrity risk.
more →
Security Boulevard, Monday, November 25th, 2024
Department of Defense (DoD) data is some of the most sensitive out there. That's why the DoD designed the Cybersecurity Maturity Model Certification (CMMC) framework. It helps software providers implement cybersecurity measures to protect controlled information.
more →
Security Boulevard, Monday, November 25th, 2024
Vanta was developed to help organizations achieve SOC 2 compliance quickly. Compliance management platforms have gained significant traction in the market. For startups and smaller businesses, these certifications are often crucial for breaking into markets where enterprise clients expect certain compliance standards as baseline requirements.
more → Security Boulevard, Monday, November 11th, 2024
Organizations devote significant resources to their compliance risk assessments each year. Yet many compliance leads and senior executives feel stuck in a cycle of repetition and question whether these efforts yield meaningful benefits.
more → Security Boulevard, Monday, November 4th, 2024
In today's fast-paced business world, companies juggle numerous responsibilities-from meeting customer demands to navigating complex regulations. One crucial area that's often misunderstood but incredibly important is enterprise compliance.
more → Analytics Insight, Wednesday, October 30th, 2024
For large tech companies, implementing GDPR compliance means substantial investments in infrastructure, data security, and personnel
more →
Security Boulevard, Tuesday, October 29th, 2024
If you process credit card payments, you need to prioritize security. One way to guarantee this safety is by complying with Payment Card Industry (PCI) Data Security Standards (DSS).
more → Security Boulevard, Tuesday, October 29th, 2024
If your business processes credit card transactions, it needs to meet the Payment Card Industry (PCI) Data Security Standards (DSS).
more → Gartner, Wednesday, October 16th, 2024
Due to widely varying government, risk, and compliance (GRC) tool pricing, enterprise risk management (ERM) leaders must understand four different pricing-tier categories of GRC solutions and apply a scoping framework to further estimate likely costs ahead of vendor selection, according to Gartner Inc.
more →
Security Boulevard, Wednesday, October 16th, 2024
We get it - keeping up with new, ever-changing compliance requirements can be a nightmare, often resulting in a mild headache at best.
more → ReadMonk, Monday, September 16th, 2024
In this RedMonk Conversation, Kate Holterhoff, senior analyst at RedMonk, speaks with Luis Villa, co-founder and general counsel at Tidelift, about new challenges in security and privacy in the AI era.
more →
CIMCOR, Thursday, July 25th, 2024
Navigating the data protection landscape is more critical than ever, and the General Data Protection Regulation (GDPR) stands at the forefront of this endeavor. From hefty fines to mandatory breach notifications, understanding GDPR compliance is crucial for businesses operating in or interacting with the EU. In this article, we'll explore five key aspects of GDPR compliance that every organization should know.
more →
ITProToday, Friday, July 19th, 2024
The job of an IT professional extends beyond technology to include navigating complex and evolving regulatory requirements.
more →
centraleyes, Tuesday, June 25th, 2024
A compliance report describes how successfully or poorly a company complies with security and business-related regulations. It is distributed to various audiences, including the board, senior executives, regulators, business partners, third-party vendors, etc.
more →
IT Security Guru, Tuesday, May 28th, 2024
The EU's flagship data protection law, the General Data Protection Regulation (GDPR), celebrated its sixth anniversary on 25th May '24. Since coming into effect in 2018, its stringent requirements for enhanced security controls and data privacy have consistently raised awareness about the issues surrounding the storage and processing of personal data. This regulation has set a global benchmark, becoming a model for regulators worldwide.
more →
Search Data Backup, Monday, April 1st, 2024
Complying with GDPR and avoiding severe fines is a primary goal of businesses, but the data governing principles and security tools to achieve compliance yield systemic benefits.
more → WhatIs, Wednesday, March 27th, 2024
The General Data Protection Regulation (GDPR) is legislation that updated and unified data privacy laws across the European Union (EU).
more → enterprise times, Wednesday, February 28th, 2024
The US Government recently announced that the state-sponsored Chinese cyber group Volt Typhoon has compromised multiple critical infrastructure organisations' IT networks in the US.
more →
Sectrio, Wednesday, February 28th, 2024
Cybersecurity luminary Bruce Schneier aptly captures this sentiment, asserting, 'The more we connect, the more we must protect.' This rings particularly true for the domain of OT, where the convergence with IT introduces a myriad of security challenges. The need for a comprehensive guide to OT security compliance has never been more pressing.
more →
Comforte, Friday, February 16th, 2024
For two decades, payments security industry body the PCI Security Standards Council (PCI SSC) has demanded compliance with an ever-growing set of rigorous technical and operational requirements in order to protect cardholder data. PCI DSS 4.0 is the biggest update to its payment card industry data security standard since its inception in 2004.
more →
Hyperproof, Friday, February 16th, 2024
As the leader of a sales organization, it's your job to set your team up for success. Great sales leaders do everything possible to put their teams in a favorable position.
more →
wallarm, Monday, February 5th, 2024
Within the sphere of cybersecurity, significant strides were made as the European Union (EU) introduced an innovative legislative tool called the General Data Protection Regulation (GDPR), unveiled on May 25, 2018.
more →
TrueFort, Wednesday, December 6,2023
Cybersecurity compliance isn't just a regulatory necessity; it's a strategic business asset
more →
Kratikal, Friday, November 17,2023
In the quick-paced digital world, personal data is extremely valuable. This makes privacy protection essential. With 67% of EU residents aware of it, the GDPR is thought to be the strictest data privacy law in the world.
more →
Cimcor, Friday, November 17,2023
PCI compliance can represent a significant cost for small businesses and startups. However, it's important to keep in mind that the cost of compliance is always lower than the cost of non-compliance. No business can afford the stiff financial penalties associated with failure to submit the required proof of compliance or the loss of revenue and potential lawsuits that can result from a data breach.
more → iapp, Wednesday, November 15,2023
The artificial intelligence regulatory landscape is quickly shifting. Most recently, U.S. President Joe Biden's administration issued an executive order on AI, G7 leaders agreed on a set of guiding principles for AI and a voluntary code of conduct for AI developers, and the EU AI Act could become the world's first comprehensive AI regulation.
more →
hyperproof, Monday, November 13,2023
Compliance programs must be customized to the needs and challenges facing each company and be comprehensive enough to deal with all of the risks the company has identified.
more → The Verge, Wednesday, November 8,2023
Telecoms regulator Ofcom, which is in charge of enforcing the rules, has launched a consultation for how sites should stop the spread of illegal content.
more →
HRDIVE, Monday, November 6,2023
Expanding businesses to international markets is common practice for enterprise companies. However, with this comes the challenge of complying with diverse regulations and laws across different countries, many of which pertain to tax, hiring, and protecting sensitive data.
more →
Enterprise Storage Forum, Friday, October 13,2023
The General Data Protection Regulation (GDPR) placed significant restrictions on data management and security when the European enacted it in 2018. But it's also had a major impact on enterprise data storage infrastructure and management.
more →
DARKReading, Thursday, September 14,2023
It takes a diverse village of experts to enact effective cybersecurity guidelines, practices, and processes.
more →
Solutions Review, Wednesday, September 13,2023
Solutions Review's Contributed Content Series is a collection of contributed articles written by thought leaders in enterprise software categories. Ameesh Divatia of Baffle takes a closer look at the world of GDPR compliance and international data transfers.
more →
scytale, Thursday, May 25,2023
Being a compliance leader in today's ever-changing digital age is no easy feat. You have to be ever so vigilant, staying ahead of the latest regulations and compliance standards. And in this era of hackers and cyber criminals, it's more important than ever to ensure that your organization has state-of-the-art security measures in place to protect valuable data from falling into the wrong hands.
more →
enterprise times, Friday, May 12,2023
In the wake of TikTok being fined 12.7m UK pounds by the Information Commissioner's Office ('ICO'), we look at some of the key data protection issues in the UK. We consider what you should be doing in your business as we approach the fifth anniversary of the General Data Protection Regulation 2016/679 ('GDPR').
more → Security Boulevard, Friday, May 5,2023
With more individuals having access to the internet, the world has undergone a profound change. The situation has altered as a result of how we now communicate and complete daily duties. By entering our personal information online, we can share documents, make payments online, and buy items. But are we aware that disclosing our personal information in such transactions exposes us to risks?
more → Security Boulevard, March 31st, 2023
CISOs and GRC officers are quickly recognizing the growing threats posed by misconfigured SaaS applications and integrations between SaaS apps. On average, 30% percent of corporate sensitive data now is processed or resides in SaaS applications like Salesforce, Microsoft 365, Google Workspace and more.
more → CXOtoday.com, March 27th, 2023
Compliance technology is an innovative solution that helps businesses automate and streamline their compliance processes, ensuring they meet all regulatory requirements.
more →
Scytale, February 23rd, 2023
Creating a GDPR data protection policy is essential for businesses. However, this can seem like a daunting task, but following the right steps can ensure your business meets all the necessary requirements.
more → FORTRA, February 15th, 2023
Only those hiding from the news, prospects, and customers can miss the data security and privacy challenges that are occurring.
more →
Apptega, February 9th, 2023
Traditionally, compliance and security teams have worked independently, often in silos with separate budgets and disparate data and tools, making collaboration and effective decision-making difficult, if not impossible.
more →
SearchSecurity, January 16th, 2023
Concern about how personal data is processed and stored is leading to the passage of new regulations that govern how companies handle consumer data.
more → Scytale, January 11th, 2023
The devil's in the data, and data is everywhere. In modern-day business, staying away from data is almost impossible, and we can't imagine why you would want to.
more → CyberSaint, January 9th, 2023
Compliance for many cybersecurity programs has been the cornerstone and the catalyst for why many programs exist in the first place.
more →
Enterprise Times, December 28th, 2022
If you're a business owner, you've probably heard of GDPR. But what is GDPR? And why do you need to be compliant?
more → Apptega, December 28th, 2022
Managing cybersecurity and compliance is always challenging, but it was even more so post-pandemic. As threat actors took advantage of changing business environments such as more remote teams and rapid technology adoption, cyber and compliance moved front and center.
more → ITProToday, December 27th, 2022
ITPro Today's most-read articles about compliance and risk management examine security awareness training, national and global regulations, and insider threats.
more → Security Boulevard, December 22nd, 2022
During the past couple of weeks, we've have been publishing daily tips to help you improve your cybersecurity and ease your path to compliance with frameworks such as SOC 2 and ISO 27001. We thought we'd kick off 2023 by providing all 10 tips in a consolidated list.
more → DARKReading, December 16th, 2022
A comprehensive data privacy program requires involvement from all parts of the business that deal with personal data.
more → Security Boulevard, December 15th, 2022
Peanut butter and jelly. Thunder and lightning. Cyber security and compliance. Just because your data is secure does not mean you are in compliance. Just because you're compliant also doesn't mean that your network is fully secure.
more →