FERC Releases Staff Report on Lessons Learned from CIP Audits

In October, the Federal Energy Regulatory Commission (FERC) released its “2020 Staff Report Lessons Learned from Commission-Led CIP Reliability Audits.” The report summarizes the Commission’s observations from Critical Infrastructure Protection (CIP) audits ...
Efficient auditing with machine learning and Slither-simil

Efficient audits with machine learning and Slither-simil

by Sina Pilehchiha, Concordia University Trail of Bits has manually curated a wealth of data—years of security assessment reports—and now we’re exploring how to use this data to make the smart contract ...
Man_working_on_laptop

Evaluating GRC Software? Four Key Questions to Ask

There are many GRC software companies in the market today. Many are startups but a few players have ... Read More The post Evaluating GRC Software? Four Key Questions to Ask appeared ...
Automation In Compliance: Why It’s a Business Imperative and Where to Start

Automation In Compliance: Why It’s a Business Imperative and Where to Start

A recently released report from Coalfire and Omdia found that for the majority of organizations, growing compliance obligations ... Read More The post Automation In Compliance: Why It’s a Business Imperative and ...
Stakeholders_Hyperproof

The Ten Most Common Information Security Program Pitfalls

There’s a myriad of mistakes that can torpedo the most well-intentioned and carefully designed information security program. Our experience working with customers in the InfoSec field is consistent as to what mistakes ...
PCI_DSS_Compliance_guide

PCI DSS Requirements and Common Control Failures

Editor’s note: This blog post is an excerpt from Hyperproof’s new ebook PCI DSS Compliance: Why It Matters ... Read More The post PCI DSS Requirements and Common Control Failures appeared first ...
Who Needs to Comply With PCI DSS?

Who Needs to Comply With PCI DSS?

Editor’s note: This blog post is an excerpt from our new ebook PCI DSS Compliance: Why It Matters ... Read More The post Who Needs to Comply With PCI DSS? appeared first ...
purpose_of_FedRAMP

FedRAMP Compliance: A QuickStart Guide

The Federal Risk and Authorization Management Program (FedRAMP) is a government-wide program that provides a standardized approach to ... Read More The post FedRAMP Compliance: A QuickStart Guide appeared first on Hyperproof ...
Clean_desks

Delivering Remote Audits: Key Challenges and Simple Tips to Tackle Them

With COVID-19 forcing entire organizations to work remotely, auditors and compliance teams have run into new challenges that ... Read More The post Delivering Remote Audits: Key Challenges and Simple Tips to ...
SOC_2_crosswalks_hyperproof

Hyperproof Releases CrossWalks to Eliminate Duplicative Work in Meeting Multiple Compliance Frameworks

Organizations in 2020 are required to keep up with multiple data privacy regulations (e.g. GDPR, CCPA ) and ... Read More The post Hyperproof Releases CrossWalks to Eliminate Duplicative Work in Meeting ...