RSI Security

Rethinking Your Cybersecurity

Category: Compliance Standards

Staying informed about all of the cyber security compliance standards is essential to keeping your company safe from hackers. Read on to learn about the various steps you can take to stay up to date with your industry’s compliance standards.

  • What is the NIST AI Risk Management Framework?

    What is the NIST AI Risk Management Framework?

    The NIST AI Risk Management Framework (RMF) provides structured guidance for managing risks associated with AI technologies, emphasizing transparency, accountability, fairness, and explainability. It aims to enhance the security, reliability, and ethical integrity of AI systems through systematic risk identification, assessment, mitigation, and monitoring. Adoption of this framework helps organizations foster trust, comply with regulations, optimize operational efficiency, and promote responsible innovation in AI development and deployment.

     

    (more…)

  • Who Needs ISO 27001 Certification?

    Who Needs ISO 27001 Certification?

    Determining whether you need to become ISO 27001 certified requires knowing:

    • What the ISO 27001 framework is and why it exists
    • Which locations the framework primarily applies to
    • Which industries require or suggest ISO compliance

    What options are available for comprehensive compliance

     

    (more…)

  • Streamline HIPAA Risk Assessments with HITRUST Certification

    Streamline HIPAA Risk Assessments with HITRUST Certification

    Organizations in and around healthcare can streamline risk assessments in five easy steps:

    • Understanding which regulations apply (i.e., HIPAA, HITRUST, etc.)
    • Scoping out what information and systems need to be assessed
    • Preparing for other niche assessments in the event of a breach
    • Implementing controls from the HITRUST CSF to cover their needs
    • Conducting an official HITRUST assessment for broad compliance

    (more…)

  • Avoiding a Credit Card Data Breach

    Avoiding a Credit Card Data Breach

    The financial and reputational impact of a credit card data breach can be devastating. In 2017, the average cost of a breach reached $3.62 million, with over five million records stolen every day. To protect your business from becoming part of these costly statistics, it’s essential to understand where the risks lie.

    In this article, we’ll explore how credit card data breaches occur and outline practical steps your company can take to strengthen defenses and prevent them. (more…)

  • HITRUST Certification Requirements: Everything You Need to Know

    HITRUST Certification Requirements: Everything You Need to Know

    Information systems offer many benefits for companies in terms of efficiency and organization. Yet, some companies see the institution of new technology as a hassle, making electronic information protection just another roadblock. However, with the emergence of the Health Information Trust Alliance (HITRUST), information protection has become more manageable, particularly with the creation of the Common Security Framework (CSF). 

    There are various factors that businesses should be aware of to best meet HITRUST CSF requirements. Read on to find out what the requirements are to become HITRUST certified. 

    (more…)

  • What is NIST and NIST Cybersecurity Framework?

    What is NIST and NIST Cybersecurity Framework?

    When it comes to technology and science, the U.S. Government has a variety of bodies and agencies that help support innovation and promote industry-wide standards. One of the most important (and under appreciated) of these organizations is NIST. (more…)

  • NIST 800-171 Checklist: What You Need to Know

    NIST 800-171 Checklist: What You Need to Know

    When it comes to data that cyber criminals are after, defense and military information rank near (if not at) the top of the list. And its not something the U.S. Department of Defense (DOD) federal government is taking lightly. Between cyber protection, support, and other teams, the DOD is on pace to have 133 teams of federal agencies dedicated specifically to cyber defense. In addition, the DOD is working with the National Institute of Standards and Technology (NIST) to implement regulations that will also make sensitive data handled by DOD and government contractors secure as well.

    (more…)

  • Major Components of the HITECH Act: What You Should Know

    Major Components of the HITECH Act: What You Should Know

    Patients’ medical records are some of the most attractive targets for theft. The US Department of Health and Human Services (HHS) designated them as protected health information (PHI) in the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and laid out measures to ensure their safety. Later, the HITECH Act of 2009 updated these safeguards for the modern era. But what are the major components of the HITECH Act? (more…)

  • EU GDPR Explained

    EU GDPR Explained

    The impending European Union General Data Protection Regulation (GDPR) represents a sea-change in a company’s security strategies, transcending checkbox compliance programs.

    (more…)

  • How to Achieve Cryptocurrency Security Standard (CCSS) Compliance

    How to Achieve Cryptocurrency Security Standard (CCSS) Compliance

    Without a doubt, Bitcoin, cryptocurrency, and the blockchain are in the process of revolutionizing the entire landscape of global finance. Experts from major think tanks like the MIT Technology Review are predicting that cryptocurrency growth isn’t expected to slow anytime soon. As the cryptocurrency industry becomes more prevalent in various aspects of our personal and business lives, so is the need for regulatory standards to ensure transactions take place in a safe, secure manner. Which is exactly why the Cryptocurrency Security Standard (CCSS) was developed.

    (more…)