Matt Kelly

Hyperproof

Companies need to collaborate with their audit firms, which means they must anticipate the audit firm’s needs. The better you do at that task, the easier (read: less expensive) your audit will be. Unfortunately, anticipating your audit firm’s needs can be difficult. Some companies may have never undergone an audit ... Read More

Why do some companies fare so poorly with cybersecurity audits and with putting audit findings to good use? The post Cybersecurity Audits: What to Expect, How to Perform One, and What to Do With Your Findings appeared first on Hyperproof ... Read More

Earlier this year, the U.S. Securities and Exchange Commission began warning publicly traded companies against the risk of “AI-washing” — that is, making misleading statements to investors about how well the company manages its use of artificial intelligence. This ultimately adds to the list of AI risks companies need to ... Read More

Talk to any compliance officer today, and they will all agree that modern security compliance — fulfilling your organization’s regulatory obligations to keep data safe, secure, and intact — must be a top priority for every business. But what, exactly, does that mean? How can compliance officers determine their security ... Read More

Every organization needs to have security measures and policies in place to safeguard its data. One of the best and most important measures you can take to protect your data (and that of your customers) is simply to have a robust information security policy. Of course, that idea sounds simple ... Read More

Editor’s note: With the increased prevalence of ransomware and other cyberattacks, now is the time to take a moment to review your cyber response plan and examine the security of your key information security systems. Hyperproof has updated this popular article with fresh information to help cybersecurity professionals respond effectively ... Read More

IT general controls are among the most important elements of effective compliance and IT security. So it’s a bit strange that many businesses — and compliance professionals, for that matter — struggle to understand exactly how “ITGCs” support compliance and the many ways they can fail.  So today let’s take ... Read More

Economic uncertainty has been a hot topic for all businesses lately. The good news: the US economy might have avoided a recession, and rising interest rates haven’t slowed economic growth. However, bad times always arrive sooner or later, and a wise compliance officer knows that you should build a compliance ... Read More

The SOC 2 audit — an audit intended to assess the data protection practices of technology vendors and other service providers — has become a standard tool in modern risk management. Large corporations now possess huge amounts of personal or confidential data, and before they share that data with their ... Read More

Life comes at you fast, and that’s especially true for CISOs grappling with the many compliance risks in cybersecurity. From greater regulatory pressures and heightened privacy standards to increased personal liability, topped off with new rules for artificial intelligence — a lot happened in 2023. With these changes come implications ... Read More