Governance, Risk and Compliance

Public Support Emerges for Chris Krebs, SentinelOne After Trump Memo
The cybersecurity industry has been conspicuously quiet after President Trump targeted ex-CISA director Chris Krebs and SentinelOne for retribution. However, some voices have risen above the silence to urge support and the ...
Security Boulevard
Navigating New Cyber-Physical System Security Regulations
Cyber-Physical Systems (CPS) are no longer the stuff of science fiction; they are woven into the fabric of our daily lives, organizations, and critical infrastructure. From smart grids managing our power to ...

Navigating PCI DSS 4.0 Compliance: How Automated Data Discovery Can Help
The Payment Card Industry Security Standards Council (PCI SSC) continues to evolve its flagship data security standard. The latest version encourages complying organizations to move away from traditional, periodic audits to a ...

Wyden to Hold Up Trump CISA Nominee Over Telecom ‘Cover Up’: Report
Senator Ron Wyden (D-OR) is demanding CISA release a three-year-old report critical of telecoms' security in the wake of the expansive Salt Typhoon hacks before he lifts a hold on President Trump's ...
Security Boulevard

NIST Deprioritizes Pre-2018 CVEs as Backlog Struggles Continue
NIST, which for more than a year has been struggling to address a backlog of CVEs in its database following budget cuts, is now putting pre-2018 vulnerabilities on the back burner to ...
Security Boulevard

PCI DSS 4.0: Time to Pay Up, Securely
PCI DSS 4.0 compliance raises the regulatory bar with stricter authentication, continuous monitoring and tighter third-party oversight ...
Security Boulevard
HIPAA Compliance in the Digital Age: How to Navigate Complexities and Protect Patient Data
Safeguarding patient information has become more critical than ever in today’s evolving digital healthcare landscape. As technology leaders, we must navigate the intricate maze of regulations and implement robust strategies to ensure ...

How effective security awareness training elevates cybersecurity in your organization
Cybersecurity has become a paramount concern for organizations across all sectors in the rapidly evolving digital landscape. As technology leaders, we recognize that while technological defenses are crucial, the human element often ...

Oracle Hack: From ‘Deny-Deny-Deny’ to ‘Oops-Oops-Oops’
Richi Jennings | | CVE-2021-35587, Larry Ellison, OCI, Oracle, Oracle Access Manager, Oracle Classic, Oracle cloud, Oracle Cloud Classic, Oracle Cloud infrastructure, Oracle Fusion Cloud, rose87168, SB Blogwatch
Classic “wordplay:” Larry’s PR angels desperately dance on the head of a pin ...
Security Boulevard
Navigating third-party risk assessments in a changing business landscape
In today’s interconnected business environment, organizations increasingly rely on third-party vendors to enhance operational efficiency and drive innovation. For instance, consider a mid-sized retail company that partnered with a logistics provider to ...