Truvantis Blog | CISO (3)

Cybersecurity – Responsibility vs. Accountability

Responsibility vs. Accountability for Oversight of Cybersecurity The need to manage cybersecurity and privacy risk is generally accepted. In many organizations, it may even be clear who is doing it. However, there is often a lack of clarity over the lines of responsibility and

SOC2, CISO, vCISO, Security Program

vCISO - Stories from the Trenches

Disasters, heroics, funny stories, and impacts to business success Nate Hartman describes a six-month stint as an acting CISO or virtual CISO (vCISO) at a fast-paced Silicon Valley tech company.

SOC2, CISO, vCISO, Security Program

What are the SOC 2 Trust Services Criteria?

The SOC 2 Trust Services Criteria (TSCs) for information technology, is a framework for designing, implementing and evaluating information system controls. The purpose of controls is to ensure your information system can meet its objectives. The

SOC2, CISO, vCISO, Security Program

Understanding the Business Value of SOC 2 Compliance

System and Organizational Controls 2 (SOC 2) is sometimes known as Service Organization Controls. Maintained by the American Institute of Certified Public Accountants (AICPA), SOC 2 is a standard for auditing and reporting on the efficacy of

SOC2, CISO, vCISO, Security Program, Risk Assessment

Bridging the gap between CISOs

Facing the challenges of new cybersecurity and privacy laws, a sharp increase in cybersecurity litigation, and the ceaseless evolution of ransomware and cyberthreats, the role of Chief Information Security Officer (CISO) has become critical to

CISO, vCISO, Penetration Testing, HIPAA, Security Program, Risk Assessment

The One Reason to Pen Test Data Backup Systems - Ransomware Protection

At the heart of your disaster recovery plan, organizations often disregard data backup and recovery systems when it comes to pen testing and maintaining security. Vulnerable backup systems make for an attractive target by ransomware gangs, grief/

PCI DSS, CISO, vCISO, Penetration Testing, HIPAA, Security Program, Risk Assessment, Red Teaming

The 0-day in the Room Nobody is Talking About: Scope

Scope is an important shaping tool that, when leveraged properly, can help enhance engagement outcomes during penetration testing, red team and other security operations. Like any tool, however, when used incorrectly it can have devastating

CISO, vCISO, Security Program

Vendor Security Assessment Questionnaire Templates

Tired of filling out vendor security assessment questionnaires or shared assessment SIG templates? A vCISO service could be just the right thing for you. Is your sales team coming to you with deals that won’t close until you’ve filled out yet

SOC2, CISO, vCISO, Security Program

Using a vCISO Service to Achieve and Retain a SOC 2 Certification

CSO Online, which knows plenty about what goes into ensuring security, makes a strong case for hiring a virtual Chief Information Security Officer (vCISO). It notes that fulltime CISOs “can be hard to come by, often stay in their job for two years

PCI DSS, CISO, vCISO

Use a vCISO to Achieve and Maintain PCI DSS Compliance

PCI is a strong security Framework. If you are a business owner, you have probably heard about the PCI DSS (Payment Card Industry Data Security Standard). All organizations that store, process, or transmit payment card transactions must adhere to

Previous Next

Blog

Subscribe For Updates

Recent Posts

Related Articles By Topic

Related Articles By Topic

Cybersecurity – Responsibility vs. Accountability

vCISO - Stories from the Trenches

What are the SOC 2 Trust Services Criteria?

Understanding the Business Value of SOC 2 Compliance

Bridging the gap between CISOs

The One Reason to Pen Test Data Backup Systems - Ransomware Protection

The 0-day in the Room Nobody is Talking About: Scope

Vendor Security Assessment Questionnaire Templates

Using a vCISO Service to Achieve and Retain a SOC 2 Certification

Use a vCISO to Achieve and Maintain PCI DSS Compliance

1 Cybersecurity – Responsibility vs. Accountability

2 vCISO - Stories from the Trenches

3 What are the SOC 2 Trust Services Criteria?

4 Understanding the Business Value of SOC 2 Compliance

5 Bridging the gap between CISOs

6 The One Reason to Pen Test Data Backup Systems - Ransomware Protection

7 The 0-day in the Room Nobody is Talking About: Scope

8 Vendor Security Assessment Questionnaire Templates

9 Using a vCISO Service to Achieve and Retain a SOC 2 Certification

10 Use a vCISO to Achieve and Maintain PCI DSS Compliance