framework

NIST 800-171 Revision 3: The Impact on CMMC Compliance and How To Get Ready
2025 Update: We’re almost halfway through 2025, and if you’re part of the Defense Industrial Base (DIB), you’re probably already knee-deep in NIST SP 800-171 and CMMC requirements. As we roll through ...

The Full NIST 800 53 Checklist: How to Prepare for an Audit
The NIST 800-53 Revision 5 provides a catalog of security and privacy controls for information systems and organizations to protect organizations and ultimately, the US from a diverse set of risks, including ...

New York SHIELD Act: Everything You Need to Know for Compliance
New York’s Privacy Laws: A Legacy and a Challenge New York is a leader in finance, culture, and technology. Less than a decade ago, it was also a forerunner in privacy and ...

The Top Cybersecurity Breaches in the UAE
The global cost of cybercrime is projected to reach $10.5 trillion annually by 2025, up from $3 trillion in 2015.. Financial institutions, government agencies, and energy companies are among cybercriminals’ favorite targets, ...

NYDOH Cybersecurity Regulations: What Healthcare Providers Need to Know in 2025
10 NYCRR 405.46: NY’s New Hospital Cyber Regulation Hospitals are no strangers to health data privacy laws like HIPAA. But New York’s new cybersecurity regulations take things to the next level. Finalized ...

Leveraging NIST OSCAL to Provide Compliance Automation: The Complete Guide
What is OSCAL? OSCAL provides a traceable and machine-readable data format for capturing and sharing security information. A standardized, continuous representation of an organization’s security controls helps prove compliance with NIST’s risk ...

Mapping HIPAA to ISO 27001: A Comprehensive Guide
Two Foundational Frameworks: ISO 27001 and HIPAA With the growing number of risks in the information security space, a standardized approach is crucial to protecting an organization’s operations. Two foundational frameworks for ...

Understanding the Florida Digital Bill of Rights
Florida Senate Bill 262 has passed in the Republican-led Florida legislature. The Florida Privacy Act attempts to give consumers the right to opt out of sharing their data for targeted online ads, ...

An Introduction to the Hawaii Consumer Privacy Protection Act
Updated September 2024 Here’s an interesting fact about the Hawaii bill of rights: The Hawaii constitution lists the word “privacy” several times. Compare that to the U.S. Bill of Rights, which does ...
DORA ICT risk management framework: What to know
The Digital Operational Resilience Act, or DORA, focuses on limiting how disruptive cyberattacks are to financial institutions. One of its key characteristics is that it views open source analysis, also known as ...