PCI compliance and WooCommerce – All you need to know

Whether you’re building, maintaining, or operating an eCommerce website, you need to be aware of your security responsibilities. Luckily, there are standards and regulations that can help you keep online stores, such as those built with WooCommerce, sa… Continue reading PCI compliance and WooCommerce – All you need to know

5 Steps to Effective CUI Classification

Prior to the U.S. government’s National Archives and Records Administration’s (NARA) implementation of the Controlled Unclassified Information (CUI) protection framework, government agencies employed ad hoc agency-specific policies, procedures and mar… Continue reading 5 Steps to Effective CUI Classification

5 Steps to Effective CUI Classification

Prior to the U.S. government’s National Archives and Records Administration’s (NARA) implementation of the Controlled Unclassified Information (CUI) protection framework, government agencies employed ad hoc agency-specific policies, procedures and mar… Continue reading 5 Steps to Effective CUI Classification

Mind the GAAP: A Lens for Understanding the Importance of the CIS Controls

Given that attacks are only increasing and there needs to be greater efficacy in how companies protect themselves, let us reference how the financial industry has created and relies on a body of standards to address issues in financial accounting as a … Continue reading Mind the GAAP: A Lens for Understanding the Importance of the CIS Controls

3 Best Practices for Customizing Your Compliance Program

Most large-scale entities need to prove compliance with multiple regulatory standards. In their efforts to meet their compliance mandates, organizations could suffer a major drain on their time and resources. This possibility holds true regardless of w… Continue reading 3 Best Practices for Customizing Your Compliance Program

The Hidden Benefits of Compliance

If I were to ask you why you scanned for compliance at your company, I’d bet you’d tell me it was to help you pass requirements easier, to ensure that your audits are good on the first pass and so that you could troubleshoot technical issues with anoth… Continue reading The Hidden Benefits of Compliance

Achieving Automated TISAX Compliance

Digital attackers are increasingly targeting the automotive industry. In its 2020 Automotive Cybersecurity Report, for instance, Upstream found that the number of annual automotive cybersecurity incidents had increased by 605% since 2016, with the numb… Continue reading Achieving Automated TISAX Compliance

NIST SP 800-172 (Formerly SP 800-171B) Release Couldn’t Come at a Better Time

NIST’s timely new release of Special Publication (SP) 800-172 (formerly referred to in draft form as 800-171B) provides exactly what its title says, Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST… Continue reading NIST SP 800-172 (Formerly SP 800-171B) Release Couldn’t Come at a Better Time

Compliance – The Invisible Hand of Cybersecurity

Have you ever worked with a company that operates as “close to broken” as reasonably possible? Companies that follow that mindset usually do not have the most robust security practice, and they certainly will walk very close to the edge of compliance. … Continue reading Compliance – The Invisible Hand of Cybersecurity

Are Your IT Infrastructures Up to Date with the Cybersecurity Compliance Laws in 2021?

It’s an unfortunate fact that cybersecurity is rarely the foremost of concerns among small- to medium-sized businesses. However, investing in cybersecurity is becoming even more important as these organizations undergo digital transformation. It may se… Continue reading Are Your IT Infrastructures Up to Date with the Cybersecurity Compliance Laws in 2021?