Critical Infrastructure Security, Vulnerability Management

NIST releases continuous monitoring guidance

October 5, 2011

The National Institute of Standards and Technology late last week published new guidance to help organizations develop and implement an information security continuous monitoring (ISCM) program. This initiative can help companies better provide ongoing awareness of threats and vulnerabilities, assess the effectiveness of deployed security controls and support risk management decisions, according to the 80-page guidance document. A mature ISCM program, which requires the use of both automated and manual processes, will enable companies to move from compliance-driven to data-driven risk management.

Angela Moscaritolo

Supply chain

Change Healthcare breach prompts Nebraska lawsuit

SC StaffDecember 18, 2024

Aside from leading to the deferral of patient care and prescription processing, such an attack against Change Healthcare has also led to the proliferation of malicious actors purporting to be hospital representatives to obtain credit card numbers, as well as excessive burdens for health providers, according to the lawsuit.

Critical Infrastructure Security

Regional Care breach impacts 225K

SC StaffDecember 18, 2024

Unauthorized systems access has prompted the exfiltration of names and other personal data, said Regional Care in a filing with the Office of the Maine Attorney General that noted the breach's discovery almost a week after the intrusion commenced.