Incident Response May 29, 2019

Massachusetts Amends Data Breach Law — What to Know for Your Incident Response Strategy

2 min read - This update can be seen as part of a wider trend in data privacy regulations where guidelines on breach reporting and incident response documentation are becoming more specific.

Data Protection May 1, 2019

Are Companies Doing Enough to Secure PII? I Spoke With Security Expert Frank Abagnale to Find Out

4 min read - For the enterprise responsible for protecting customers' PII, should passwords be stored at all — even encrypted?

Advanced Threats April 18, 2019

Challenges and Opportunities to Close the Cybersecurity Gap in the Financial Services Industry

4 min read - For the financial services industry, being transparent and demonstrating a mature, integrated business and security model is critical to build trust in today's evolving threat landscape.

CISO April 5, 2019

Preparing for the CCPA: Leverage GDPR Investments to Accelerate Readiness

5 min read - To prepare for the CCPA and other upcoming data privacy regulations, start by applying the best practices and frameworks you used to achieve GDPR readiness when the regulation took effect last May.

CISO March 25, 2019

Adopting the NIST 800-53 Control Framework? Learn More About the Anticipated Changes in 2019

3 min read - Organizations adopting NIST 800-53 should understand how upcoming changes will affect senior leadership accountability, data privacy and third-party assessments.

Data Protection March 14, 2019

Breaking Down the Incident Notification Requirements in the EU’s NIS Directive

6 min read - Similar to the GDPR, you can approach the NIS Directive as a roadblock or a nuisance, or you can consider it an excellent opportunity to improve your security posture.

CISO March 8, 2019

At RSAC 2019, It’s Clear the World Needs More Public Interest Technologists

4 min read - In a world where technology and culture are one and the same, public-interest technologists are critical to a better future.

January 7, 2019

HHS Publishes Voluntary Healthcare Cybersecurity Practices for Medical Organizations

2 min read - The U.S. Department of Health and Human Services (HHS) released voluntary healthcare cybersecurity practices to help medical organizations strengthen their security posture.

CISO January 2, 2019

Why Proactive Data Compliance Is Imperative for Secure Digital Transformation

4 min read - The risks associated with failure to establish proactive data compliance go far beyond regulatory violations and loss of consumer trust. Compliance is critical for secure digital transformation.

Banking & Finance December 12, 2018

Continuous Compliance Eases Cloud Adoption for Financial Services Firms

3 min read - Financial services firms face three challenges when adopting the hybrid cloud: continuous compliance with geography-specific regulations, inconsistent controls and lack of a common security framework.