Experiencing a cyber attack or security breach? Contact Incident Response Team!
For startups and mid-market companies looking to externally prove their security, the AICPA’s SOC2 compliance is currently the standard in the US. There are a few problems, however, with this approach. First and foremost, COMPLIANCE IS NOT SECURITY. Yes, I screamed that in all caps, because it can’t be stressed […]
Read More
What are CCPA Regulations? The California Consumer Privacy Act, otherwise known as CCPA, is a Californian law that went into effect January 1, 2020. According to the State of California Department of Justice, the law “gives consumers more control over the personal information that businesses collect about them.” The CCPA […]
Read More
In today’s digital landscape, data privacy is not just a regulatory requirement—it’s a business imperative. With 64% of consumers saying they are unlikely to do business with a company they can’t trust with their data, and data breaches, which involve the unauthorized release of confidential information leading to significant financial […]
Read More
Demystifying third party risk In today’s interconnected world, organizations rely heavily on third party vendors, so understanding third party risk is essential. These can include vendors, suppliers, service providers, or software used to run your business. While these external partnerships are invaluable for maximizing profit and efficiency, they also introduce […]
Read More
Deciding if your organization needs a Virtual Chief Information Security Officer (vCISO) is a critical step in fortifying your cybersecurity posture against constant cybersecurity threats. This straightforward guide outlines the expertise a vCISO brings to preempt digital threats, manage cybersecurity risks, and provide measurable benefits—all without the cost of a […]
Read More
Facing the cybersecurity questionnaire challenge It’s a big day. Your company is about to sign with its biggest customer yet: a Fortune 500 (F500) multi-million dollar deal. You’re beyond excited as this will set your company up for the big leagues. Then, during procurement, your heart sinks as the customer […]
Read More
Navigating the SEC cybersecurity compliance landscape Navigating the intricate landscape of cybersecurity within the realm of public companies has taken on an even more regulated dimension. The imminent implementation of new Securities and Exchange Commission (SEC) Cybersecurity disclosure rules that take effect on September 5, 2023, is redefining the shape […]
Read More
As a cybersecurity leader, you understand the significance of allocating adequate resources and funding to your cybersecurity budget. But how do you effectively communicate the financial requirements to the Board of Directors and C-suite? How can you secure the necessary budget approval for your cybersecurity security and risk management initiatives? […]
Read More
In July 2022, The American Data Privacy and Protection Act (ADPPA) was voted to advance to the United States House of Representatives for approval. It is the closest U.S. attempt at a federal consumer data privacy law. But, it hasn’t passed yet. In the meantime, state legislatures are implementing their […]
Read More
Cybersecurity risk assessment ROI introduction With the increasing shift towards remote work models, the attack surface expands, emphasizing the importance of thorough cybersecurity risk assessments. As network perimeters diminish, employees and vendors can now access enterprise assets, customer data, and applications from their homes. This scenario presents an ideal opportunity […]
Read More
Advancements in AI technology are just as common in the news headlines as new cyber attacks. Cyber criminals are showing off their strength in every battlefield available to them – literally and figuratively. The last few years have seen cyber attacks rise on businesses in all sectors as well as […]
Read More
The SolarWinds cyber attack that took place in 2020 via the SolarWinds Orion platform is a prime example of a supply chain attack. The attack had ramifications beyond SolarWinds, effecting both private companies and federal agencies. With the attack taking place in 2020, we are still seeing after effects of […]
Read More