Data Privacy & Cybersecurity

With its recent proposals, OMB has started to define what a post perimeter-based security world will look like. The move to zero-trust architecture will impact every business function – including risk and compliance management. Here’s what you can do to prepare.

The concept of privacy by design has evolved far beyond its engineering origins. Learn how a people-focused and technology-enabled approach to data privacy is critical to protecting your organization’s revenue, risk and reputation.

Boards and senior management agree that they must move beyond a compliance-centric approach to cybersecurity. But what role should compliance play? Here are some key steps compliance can take to break down silos and develop “hardened” business operations.

NAVEX Global’s recent survey of IT security professionals found that alliances are growing between IT security and IRM. Organizations are moving away from a siloed approach, and adopting an integrated risk management (IRM) strategy.

An executive order was signed on May 12, directing the federal government to overhaul its approach to cybersecurity. Corporate compliance and risk management professionals should consider this order carefully.

Cybersecurity threats are constantly evolving, and so is cybersecurity compliance. Learn what the arrival of CMMC means for your business and what you can do now to prepare.

Organizations need to understand and manage the cybersecurity risk third-parties can present. Traditionally, security teams have used annual security assessments to assess third-party risk. However, this poses several challenges to security teams. Learn the benefits of monitoring cybersecurity risk continuously, and the risks of not doing so.

When it comes to data privacy law, change is the only constant. The global pandemic unleashed a new set of risks related to data privacy that companies will have to confront in 2021. Despite the COVID chaos, data privacy regulations around the world are becoming more strict, more prolific, and more stringently enforced.

In November, California voters passed the California Privacy Rights Act (CPRA). How does this new Act change CCPA, and what does it mean for businesses that use personal information? Here are 7 changes CPRA is making to data privacy, and what it means for your business.

It’s not optional - organizations must prioritize cybersecurity risk. To do that, you need a framework. NIST CSF is a risk-based framework and common language for understanding, managing, and indicating cybersecurity risk. Here’s why and how you should use it.

As data protection and customer privacy become higher corporate priorities, compliance and risk professionals would be wise to leverage privacy frameworks. Here are 5 reasons you need a framework for you data privacy and protection.

Business relies on census data to make business decisions, yet there are concerns about the integrity of the 2020 Census. How can business trust this once trusty resource? Start by identifying it as a business risk.

On Friday, California officially approved final regulations under the California Consumer Privacy Act (CCPA). Here are 7 tips for keeping your company’s website CCPA compliant – and out of regulators’ crosshairs.