Compliance Management

Exposing companies to potential lawsuits tied to poorly developed software could incentivize the industry to design more secure products. Here's why that might be difficult to implement.

New York’s Department of Financial Services hit OneMain Financial with a massive penalty, reflecting the severity of security failures found during an audit tied to multiple data breaches.

Here’s a plan for making compliance a more integrated part of the security operation.

After the Supreme Court overturned Roe v. Wade, Google committed to modifying data retention policies for sensitive locations that could put users at risk.

Our customers need to trust that we keep their data safe – if companies lose that trust they need to reconsider its value to the bottom line.

New York’s investigation into Practicefirst Medical after a reported breach impacting 1.2 million individuals found serious security program failures, including a failed software patch.

HIPAA requires entities to disclose breaches within 60 days, but it took 18 months for Apria Healthcare to inform over 1.8 million patients.