Compliance Standards Archives | Page 39 of 82

CCPA Email Marketing Compliance Guide

by RSI Security January 26, 2022May 27, 2025

Companies that market services or products to consumers in California must comply with CCPA email marketing guidelines to protect data privacy. Essentially, the CCPA protects the rights of consumers in California regarding the collection, use, or sale of personal data. Read on to learn more about CCPA email marketing compliance.

January 26, 2022May 27, 2025 0 comment

HIPAA / Healthcare Industry

Maintain HIPAA Compliant Cloud Storage in 2023

by RSI Security January 18, 2022August 29, 2025

written by RSI Security

Healthcare providers are among the greatest beneficiaries of modern IT advancements, and cloud technologies are no exception. HIPAA-compliant cloud storage allows for fast, secure access to patient data, enabling timely medical evaluations and treatment decisions. However, under the Health Insurance Portability and Accountability Act (HIPAA), the use and storage of protected health information (PHI) must follow strict security and privacy rules. Without the right safeguards in place, cloud storage can expose organizations to compliance risks. So, how can healthcare organizations maintain HIPAA-compliant cloud storage effectively?

January 18, 2022August 29, 2025 0 comment

HITRUST

What is a HITRUST Validated Assessment, and Does Your Organization Need One?

by RSI Security January 17, 2022December 3, 2024

written by RSI Security

The HITRUST CSF can help organizations streamline compliance across multiple regulatory frameworks, address security gaps, and strengthen overall cybersecurity. Compliance with the HITRUST CSF may require your organization to complete a HITRUST Validated Assessment to verify adherence to HITRUST CSF controls. Read on to learn more.

January 17, 2022December 3, 2024 0 comment

PCI DSS

SSL Security and PCI Compliance for eCommerce: Top Challenges and Considerations

by RSI Security January 13, 2022March 30, 2022

written by RSI Security

eCommerce businesses that process large volumes of card payment transactions must protect the sensitive data involved. Strong SSL security and PCI compliance for eCommerce practices can minimize data breach risks and enhance your overall eCommerce cybersecurity. Read on to learn about the top challenges and considerations.

January 13, 2022March 30, 2022 0 comment

HITRUST

Why choose the HITRUST CSF over other control frameworks like NIST SP 800-53 and ISO/IEC 27001?

by RSI Security January 10, 2022March 30, 2022

written by RSI Security

Organizations seeking streamlined solutions to their regulatory compliance requirements often look to comprehensive frameworks. The HITRUST CSF, the National Institute for Standards and Technology’s Special Publication 800-53 (NIST SP 800-53), and the International Organization for Standardization and International Electrotechnical Commission’s joint ISO/IEC 27001 are three prime examples of one-size-fits-all compliance. But which is best for your organization?

January 10, 2022March 30, 2022 0 comment

PCI DSS

Are You Eligible for PCI DSS Remote Assessment?

by RSI Security January 4, 2022March 16, 2022

written by RSI Security

Ongoing PCI DSS adherence mandates that applicable organizations complete security assessments to verify compliance. Although a Qualified Security Assessor (QSA) will conduct onsite compliance audits and attestations, you may be eligible for a PCI DSS remote assessment. Read on to learn if you’re eligible.

January 4, 2022March 16, 2022 0 comment

PCI DSS

Would Your Workforce Benefit from PCI Certification Training Modules?

by RSI Security January 2, 2022March 30, 2022

written by RSI Security

Organization-wide adherence to PCI compliance is critical to protecting sensitive cardholder data from cybersecurity threats. PCI certification training can help increase employee awareness and understanding of PCI security frameworks, ultimately strengthening your organization’s PCI data security. Read on to learn more about the various PCI certification training modules.

January 2, 2022March 30, 2022 0 comment

HIPAA / Healthcare Industry

Understanding Patient Data Security Risk Management Requirements for HIPAA

by RSI Security December 21, 2021September 2, 2025

written by RSI Security

Organizations within and adjacent to the healthcare industry must comply with HIPAA regarding their interactions involving protected health information (PHI). The HIPAA Security Rule outlines safeguards for patient data security risk management to help healthcare organizations minimize risk to PHI. Managing risks to PHI security is of the utmost importance and can help your organization mitigate data breaches. Read on to learn how.

December 21, 2021September 2, 2025 0 comment

SOC 2

Comprehensive SOC 2 Implementation Guide

by RSI Security December 10, 2021May 30, 2025

written by RSI Security

Organizations looking to build trust among current and potential clients have a host of tools available to them—but one of the most effective is a SOC 2 audit. SOC 2 is an assessment framework overseen by the American Institute of Certified Public Accountants (AICPA). The SOC 2 audit is a robust evaluation process, whether Type 1 (short-term) or Type 2 (long-term). So, to guarantee success, organizations should turn to a SOC 2 implementation guide—like this one.

December 10, 2021May 30, 2025 0 comment