Staying informed about all of the cyber security compliance standards is essential to keeping your company safe from hackers. Read on to learn about the various steps you can take to stay up to date with your industry’s compliance standards.
There is a special feeling when launching a new project. It is exciting, a little nerve-racking, but always bursting with potential.
Your company might be going through a similar process and feeling. But you might be unsure about the privacy implications. You might wonder, is a DPIA required under GDPR?
Companies seeking a comprehensive solution to their compliance and cyberdefense needs should look no further than the HITRUST Alliance’s Common Security Framework (CSF). A revolutionary document, the CSF collects the controls from several regulatory frameworks and combines them into a comprehensive infrastructure any company can adopt to improve its defenses. And the first step toward the airtight protections the CSF provides is the HITRUST self-assessment questionnaire. Let’s take a look.
Let’s set the stage. It’s 5 pm at the end of a workday; you’re ready to clock off when all of a sudden you get a ping on your phone advising you of a potential security event… what next?
The first thing: do not panic. Ascertain what the event was about, and if there is evidence of a breach, act.
The GDPR data breach reporting timeline gives your organization 72 hours to report a data breach to the relevant supervisory authority.
Issuing a sell-by-date on food products protects consumer health. Issuing a data deletion policy protects consumers’ privacy.
Many businesses are asking: how long can you store data under GDPR? Like the regulation regarding sell-by-dates, EU regulators have stated that the personal data you hold must have a shelf-life.
Consumers’ financial data is a valuable target for cybercrime. As such, compliance with the Payment Card Industry (PCI) regulatory frameworks, like the PCI Data Security Standard (PCI DSS) and Payment Application Data Security Standard (PA DSS), is required for most companies that process credit card payments. But what happens for companies who don’t comply? And who enforces PCI compliance penalties?
If your company processes credit and other card-based financial transactions, you need to abide by the Payment Card Industry (PCI)’s Data Security Standards (DSS), published by the Security Standards Council (SSC). Neglecting these frameworks can result in severe consequences for your business.
Information security is the priority of Factor Analysis of Information Risk (FAIR), a system designed to manage weaknesses in an organization’s digital ecosystem. It primarily involves numbers and figures to help understand risks. To understand the quantification of risks more efficiently, we will explore Open FAIR Risk Analysis tools.
The Health Insurance Portability and Accountability Act of 1996, or HIPAA, has shaped how cybersecurity works in the healthcare industry for a quarter-century. In 2009, the Health Information Technology for Economic and Clinical Health Act (HITECH) changed how HIPAA works.
The Health Insurance Portability and Accountability Act of 1996, more commonly known as HIPAA, has had immense impacts on the domestic and global healthcare industry. Over a decade later, the US Department of Health and Human Services (HHS) expanded HIPAA’s protections with the publication of the Health Information Technology for Economic and Clinical Health Act (HITECH). But what are the HITECH safety measures? In other words, what do you need to do to fully secure your company and its stakeholders? Keep reading to find out.
The Security Standards Council (SSC) of the Payment Card Industry (PCI) has developed many frameworks to protect companies from cybercrime targeting consumers’ credit and debit cards. Among the most widespread of these frameworks is the PCI Data Security Standard, or PCI DSS, which protects nearly all consumer card data processed, stored, transmitted, or otherwise contacted by businesses. It brings us to the question: what data falls under PCI compliance, exactly, and which companies need to comply with PCI’s security standards?