Regulatory Compliance
Exploring ESG Through a GRC Lens
Oftentimes, three-letter acronyms trend and become buzzwords. At other times, they act as catalysts by influencing the business environment in which an organization operates. Such acronyms include CSR (corporate social responsibility), GRC ...
PCI 4.0: The wider meanings of the new Standard
The new PCI DSS Standard, version 4.0, contains all the steps, best practices, and explanations required for full compliance. In fact, even an organization that does not process cardholder data could follow ...
High Availability and Security for Cloud-Based Systems
IT organizations striving to ensure compliance with HIPAA, Sarbanes-Oxley, BASEL II and similar regulations generally have a good grasp of the security considerations that apply to key hardware and software systems running ...
What you need to know about PCI 4.0: Requirements 5, 6, 7, 8 and 9
In Part 1 of this series, we reviewed the first four sections of the new PCI standards. As we continue our examination of PCI DSS version 4.0, we will consider what organizations ...
NIST SP 800-161r1: What You Need to Know
Modern goods and services rely on a supply chain ecosystem, which are interconnected networks of manufacturers, software developers, and other service providers. This ecosystem provides cost savings, interoperability, quick innovation, product feature ...
What you need to know about PCI 4.0: Requirements 1, 2, 3 and 4.
The Payment Card Industry Security Standards Council has released its first update to their Data Security Standard (PCI DSS) since 2018. The new standard, version 4.0, is set to generally go into ...
Navigating Cybersecurity with NERC CIP as the North Star
Working in the Electric Utility sector of critical infrastructure gives a person a very unique perspective on how many of the pieces of the puzzle fit together to provide uninterrupted services to ...
Regulatory Compliance in the Cloud: What you Need to Know
Anyone reading this post will have at least dipped their toes into the world of cloud services. As a result of this massive growth, the world of compliance has spent much of ...
Building a Strong Business Case for Security and Compliance
Compliance is a key part of any organisation and in business terms, it is about ensuring companies of all sizes and their employees comply with existing national and international laws. In the UK ...
Compliance does not equal security: 7 cybersecurity experts share their insights
It is often stated that security is hard. Whether it is the people, processes, and technology, or any combination of the three, security is a never ending challenge. Conversely, compliance is the ...
