The fields of business continuity and disaster recovery, sometimes combined into a unified business continuity & disaster recovery program, represent different but complementary parts of incident response management. These strategies comprise two essential cybersecurity remediation perspectives following a data breach. (more…)
Category: Compliance Standards
Staying informed about all of the cyber security compliance standards is essential to keeping your company safe from hackers. Read on to learn about the various steps you can take to stay up to date with your industry’s compliance standards.
-
How to Complete a PCI Self Assessment Questionnaire
One of the most widely applicable regulatory compliance frameworks is the Payment Card Industry (PCI) Data Security Standard (DSS). (more…)
-
How Much Does PCI Compliance Cost?
Most companies that process payments via credit cards must comply with the Payment Card Industry (PCI) Data Security Standard (DSS). Achieving compliance can incur high costs—as can failing to comply. (more…)
-
How to Meet PCI DSS Level 2 Requirements
A business’s cybersecurity infrastructure must meet its regulatory compliance requirements. One compliance framework that applies to businesses in nearly every industry is the Payment Card Industry (PCI) Data Security Standard (DSS), developed and enforced by the PCI Security Standards Council (SSC). (more…)
-
What is SOC 2 Common Criteria Mapping?
To help service organizations assure their clients of data safety, the American Institute of Certified Public Accountants (AICPA) has developed several System and Organization Controls (SOC) audits. There are three variations, but SOC 2 is the most common for evaluating whether a company’s security practices are up to par. (more…)
-
How to Pass a PCI Compliance Scan
Chances are, your business relies on credit card transactions for payment. Therefore, it must be able to pass a Payment Card Industry (PCI) compliance scan. (more…)
-
Key Topics for Enterprise PCI Compliance Training
Companies that accept credit card payments and store or process cardholder data (CHD) need to comply with the Payment Card Industry (PCI) Data Security Standard (DSS). (more…)
-
PCI DSS Requirement 6: Controls for Secure Applications and Systems
Companies that process credit card payments must comply with the Payment Card Industry (PCI) Data Security Standard (DSS). Compliance efforts require all PCI-eligible companies to implement all Requirements within the DSS framework, then document the security controls protecting cardholder data (CHD) via official PCI assessment. (more…)
-
Top NIST Access Control Best Practices
Companies that work with the Department of Defense (DoD) in contractor or vendor roles need to meet certain safety thresholds. These have been defined in the Defense Federal Acquisition Register Supplement (DFARS). (more…)
-
What are the PCI 3.2 Self-Assessment Questionnaire Types?
If your company processes credit or debit card payments, you likely need to comply with the Payment Card Industry (PCI) Data Security Standards (DSS). The Security Standards Council (SSC), headed by the five Founding Members (Visa, Mastercard, Discover, American Express, and JCB International), enforces compliance by requiring eligible companies to submit annual documentation verifying their implementation of PCI controls. (more…)