.png)
Security Program vCISO PCI DSS CISO Privacy Penetration Testing SOC2 Risk Assessment CCPA CIS Controls HIPAA Red Teaming CPRA GDPR Threat Intelligence ISO27001 HITRUST Red Team
SOC2, CISO, vCISO, Security Program
The Health Information Trust Alliance (HITRUST) Common Security Framework (CSF) is a widely recognized security framework that HITRUST developed in 2007 to provide a roadmap to compliance for programs like ISO/IEC 27001 and HIPAA. HITRUST CSF incorporates security, privacy and
SOC2, CISO, vCISO, Security Program
Topic: The Compliance Equals Security Disconnect “Use the tools at your disposal correctly, stay current on threats, monitor your security posture, and live a long, prosperous, secure life." A discussion between Sean Costigan, Prof, George C.
SOC2, CISO, vCISO, Security Program
You likely need a risk assessment for compliance. PCI DSS 4.0, SOC2, ISO 27001, NIST, HIPAA, and other standards require a risk assessment as a fundamental part of a robust security program— and they're right to make this fundamental analysis a
SOC2, CISO, vCISO, Security Program
All organizations face the challenges of new cybersecurity and privacy laws, a sharp increase in cybersecurity litigation, and the ceaseless evolution of ransomware and cyber-threats. As a result, mature risk management and IT security team have
SOC2, CISO, vCISO, Security Program
"Compliance is NOT Security" You hear this common lament from security professionals, "Compliance is not security." This remark has always sounded like an excuse to me. I suppose the reason is that most people who utter this phrase always seem to
SOC2, HIPAA, CIS Controls, Security Program
You can achieve Information security by complying with an adequate set of security policies, standards, and procedures. Of course, there is no such thing as 100% secure, but if you comply with an appropriate set of security policies, standards, and
PCI DSS, SOC2, CISO, vCISO, CIS Controls, Security Program, Privacy, Red Teaming
The Data Protection Officer (DPO) is a role required by the EU General Data Protection Regulation (GDPR). If your organization is subject to GDPR and meets the large-scale data handling factors, you need a DPO. What can you do if you don't have an
Achieving SOC 2 compliance is a competitive advantage, and many times, it is critical to make a sale. SOC 2 reports are often used throughout the industry to screen vendors early in the vendor evaluation process.
PCI DSS, SOC2, CISO, vCISO, CIS Controls, Security Program, Privacy, Red Teaming
Not every business can internally support the staffing and resources necessary to independently develop robust cybersecurity and privacy programs. Fortunately, you can partially or fully outsource to trusted partners the jobs of CISO and IT security
Maybe you've been asked to provide a SOC 2 report as part of the sales cycle, or you anticipate you will need SOC 2 compliance at some point. You're wondering how much time and money you must budget to become SOC 2 compliant.
SOC2, CISO, vCISO, Security Program
The Health Information Trust Alliance (HITRUST) Common Security Framework (CSF) is a widely recognized security framework that HITRUST developed ...
SOC2, CISO, vCISO, Security Program
Topic: The Compliance Equals Security Disconnect “Use the tools at your disposal correctly, stay current on threats, monitor your security ...
SOC2, CISO, vCISO, Security Program
You likely need a risk assessment for compliance. PCI DSS 4.0, SOC2, ISO 27001, NIST, HIPAA, and other standards require a risk assessment as a ...
SOC2, CISO, vCISO, Security Program
All organizations face the challenges of new cybersecurity and privacy laws, a sharp increase in cybersecurity litigation, and the ceaseless ...
SOC2, CISO, vCISO, Security Program
"Compliance is NOT Security" You hear this common lament from security professionals, "Compliance is not security." This remark has always ...
SOC2, HIPAA, CIS Controls, Security Program
You can achieve Information security by complying with an adequate set of security policies, standards, and procedures. Of course, there is no ...
PCI DSS, SOC2, CISO, vCISO, CIS Controls, Security Program, Privacy, Red Teaming
The Data Protection Officer (DPO) is a role required by the EU General Data Protection Regulation (GDPR). If your organization is subject to ...
Achieving SOC 2 compliance is a competitive advantage, and many times, it is critical to make a sale. SOC 2 reports are often used throughout ...
PCI DSS, SOC2, CISO, vCISO, CIS Controls, Security Program, Privacy, Red Teaming
Not every business can internally support the staffing and resources necessary to independently develop robust cybersecurity and privacy ...
Maybe you've been asked to provide a SOC 2 report as part of the sales cycle, or you anticipate you will need SOC 2 compliance at some point. ...
