Data Privacy & Cybersecurity

NIST SP 800-53 Rev. 5 is still in the works, and perhaps for good reason. Here’s what to expect from Rev 5 and how it affects your risk management and cybersecurity programs.

Is the Business Associate Agreement (BAA) enough to protect PHI data at risk? Here are six strategies for adding security to PHI data that passes through the hands of business associates.

The dizzying pace of technological growth has created complex digital workplaces that are putting the concept of knowing what you don’t know to the test. Here’s how the investigative and forensic accounting fields are changing to adapt.

The utility supply chain isn’t exactly on the leading edge of cybersecurity. That’s why the North American Electric Reliability Corporation, NERC, released the NERC CIP-013-1 Cyber Security-Supply Chain Risk Management standard. The challenge is compliance.

With a myriad of data privacy regulations popping up around the world, cavalier data management no longer holds water. Organizations are expected to live and breathe “privacy by design.”

Companies are rightfully concerned about data breaches. High profile cases show the value of managing third-party risk before major incidents can occur. Here are five tips to engage.

The California Consumer Privacy Act is now in effect as of January 1, 2020. It is time to make the most of the regulation’s six-month grace period. Here are the top five challenges organizations will encounter while aligning with CCPA compliance and tips to address them.