The HITRUST Alliance is a trusted cybersecurity institution that develops frameworks to help organizations optimize their cybersecurity programs, often with the help of a managed security services provider (MSSP). One of the most useful guidance documents HITRUST publishes is the HITRUST De-Identification Framework, which standardizes practices that apply primarily to healthcare institutions but are easily adaptable and scalable to organizations in any industry. (more…)
Category: Compliance Standards
Staying informed about all of the cyber security compliance standards is essential to keeping your company safe from hackers. Read on to learn about the various steps you can take to stay up to date with your industry’s compliance standards.
-
What is the GDPR Data Breach Reporting Time?
Companies interacting with European Union (EU) member states need to protect individual citizens’ data per the General Data Protection Regulation (GDPR). The GDPR breaks down specific rights for data subjects and the responsibilities that the entities processing or controlling their data must meet. If a data breach occurs, organizations must comply with GDPR notification requirements. (more…)
-
Safeguarding Covered Defense Information and Cyber Incident Reporting
If your company is a supplier or contractor with the US Department of Defense (DoD), it has to comply with several regulations to ensure the safety of US citizens, domestic and abroad. The most comprehensive is the Defense Federal Acquisition Regulation Supplement (DFARS). It specifies the requirements pertaining to covered defense information (CDI), including ways to safeguard it and report on any cyber incidents that could compromise it. (more…)
-
DoD CUI Categories to Protect for NIST and DFARS Compliance
Organizations seeking contracts with the Department of Defense (DoD) need to comply with the Defense Federal Acquisition Register Supplement (DFARS). (more…)
-
How to Complete a PCI Attestation of Compliance
Per a study from TSYS, 80 percent of US consumers prefer credit or debit card payments over cash and other options. So, if your organization doesn’t process card payments, you potentially inconvenience four out of five prospective customers—which, at scale, isn’t beneficial. (more…)
-
How to Conduct a PCI Gap Assessment
Is your organization ready to comply with the Payment Card Industry (PCI) Data Security Standard (DSS) framework? If you process or store credit card data, you’ll need to be. (more…)
-
Basic Risk Analysis Strategy in Healthcare
Conducting a risk analysis is one of the initial steps healthcare entities must complete for HIPAA Security Rule compliance. The Security Rule was published by the U.S. Department of Health and Human Services (HHS) and establishes national standards for protecting electronic protected health information (ePHI). (more…)
-
What are the AICPA Trust Services Criteria?
Organizations that provide software and other services to businesses and individuals must ensure that all data entrusted to them by customers is secure. (more…)
-
What’s in a PCI Level 4 Self-Assessment?
A company’s cybersecurity infrastructure must often meet industry-specific regulatory compliance requirements. While many compliance frameworks apply only to specific sectors, some span broader cross-sections of the market at large. (more…)
-
The Difference Between Business and Individual HITRUST Certification
The HITRUST Alliance has revolutionized cybersecurity and compliance practices with its comprehensive, streamlined CSF framework. Businesses across industries have implemented HITRUST—or are in the process of doing so—for maximum security at minimal costs. (more…)