Data Privacy & Cybersecurity

Given the outlined vulnerabilities that SMBs have in areas like cyberattacks, training is evidently an essential area to focus on. Yet the tendency for SMBs is to have a reactive approach to risk and compliance topics; where the wake-up call comes after an issue has occurred.

Small and medium size businesses often fall victim to cyberattacks, with phishing emails, scamming and firewall breaches a constant concern. This infographic shows the key risk indicators for SMBs to monitor and measure against the cyber risk in their organization.

Employees need to know best practices for protecting consumer credit card data their organization processes, stores or transmits. Payment Card Industry Data Security Standard (PCI DSS) provides guidance to combat theft, fraud and misuse.

What if we’ve been thinking about the intersection of compliance and sustainability all wrong? What if, at the bottom of all this, it’s really about supply-chain risk?

Medical pros must understand HIPAA’s complexities to avoid legal trouble and ensure patient privacy.

This blog explores why a balanced strategy that proactively addresses both immediate and slow burn risks is the key to robust cybersecurity.

In part one of this cybersecurity blog series, we’ll uncover the staggering costs of failure, expose the limits of technology and reveal why your employees hold the key to safeguarding your business against cybercrime.

While data privacy and cybersecurity have become something of a buzzword, it is far from that in practice. Various laws and regulations are being passed globally that protect and govern how data is used, what cybersecurity measures are in place, how and where transfers of information are allowed, and more. These are a primary concern for IT, risk and compliance leaders. So, how can organizations stay ahead of data privacy laws and cybersecurity governance in this complex environment?

Corporations have struggled to manage cybersecurity risk for years, and now they have a new tool to help them bring order to chaos: a new and improved cybersecurity risk management framework, released at the end of February by the National Institute of Standards and Technology.

2024 is shaping up to be a very active year for regulatory and enforcement developments in the healthcare industry. This post, the second in a three-part series, will cover the increased cybersecurity expectations for the healthcare industry.

Compliance with the EU’s General Data Protection Regulation has long been a complicated, arduous task, but compliance officers can always start with one universal driver: your company’s GDPR risk keeps going up.