Quantum computers: How to prepare for this great threat to information security

The race is on to build the world’s first reliable and truly useful quantum computer, and the finish line is closer than you might think – we might even reach it this decade. It’s an exciting prospect, particularly as these super-powerful machine… Continue reading Quantum computers: How to prepare for this great threat to information security

Compliance activities cost organizations $3.5 million annually

Organizations are struggling to keep up with IT security and privacy compliance regulations, according to a Telos survey. Annual compliance cost The survey, which polled 300 IT security professionals in July and August 2020, revealed that, on average, … Continue reading Compliance activities cost organizations $3.5 million annually

Strike Graph raises $3.9M to help automate security audits

Compliance automation isn’t exactly the most exciting topic, but security audits are big business and companies that aim to get a SOC 2, ISO 207001 or FedRamp certification can often spend six figures to get through the process with the help of an auditing service. Seattle-based Strike Graph, which is launching today and announcing a […] Continue reading Strike Graph raises $3.9M to help automate security audits

2020 trends in SOX compliance

SOX & Internal Controls Professionals Group released a survey which measures the costs, execution, challenges and priorities faced by companies that comply with the Sarbanes-Oxley Act (SOX). “In its fifth year, our survey reflects the broad … Continue reading 2020 trends in SOX compliance

The Strategic Value of Remote Audits in the WFH Era

With official reports that the U.S. economy has entered a recession, organizations are looking for every opportunity to cut costs and grow their business. And while the economy slowly reopens, most organizations are opting to work from home because of… Continue reading The Strategic Value of Remote Audits in the WFH Era

Thousands of ISO certifications at risk of lapsing due to halted re-certification audits

Thousands of valuable ISO management system certifications earned by UK companies may now be at risk because auditors from Certification Bodies may not have been able to attend organizations’ premises to conduct essential re-certification audits during… Continue reading Thousands of ISO certifications at risk of lapsing due to halted re-certification audits

Internal audit leaders should develop new skills to stay relevant

Chief audit executives (CAEs) and internal audit leaders report their next-generation competency levels in three vital areas – governance, methodology and enabling technology – to be remarkably low, a Protiviti survey reveals. The survey also identifie… Continue reading Internal audit leaders should develop new skills to stay relevant

A Boxcryptor audit shows no critical weaknesses in the software

More and more companies, self-employed and private customers are using Boxcryptor to protect sensitive data – primarily in the cloud. Boxcryptor ensures that nobody but authorized persons have access to the data. Cloud providers and their staff, as wel… Continue reading A Boxcryptor audit shows no critical weaknesses in the software

Tasks associated with SOX compliance continue to be significant

Only 46 percent of audit teams have been utilizing advanced technologies to optimize SOX compliance activities, a decrease from the previous year’s Protiviti survey findings. SOX compliance challenges The longstanding challenges associated with c… Continue reading Tasks associated with SOX compliance continue to be significant

Eye-opening statistics about open source security, license compliance, and code quality risk

99% of commercial codebases contain at least one open source component, with open source comprising 70% of the code overall, according to Synopsys. Open source components and security More notable is the continued widespread use of aging or abandoned o… Continue reading Eye-opening statistics about open source security, license compliance, and code quality risk