Compliance Management

The Cybersecurity and Infrastructure Security Agency and the National Security Agency have been urged by Sen. Ron Wyden, D-Ore., to conduct an annual cybersecurity audit of the FirstNet phone network for emergency responders following the discovery of vulnerabilities in the Signaling System No. 7 protocol, which could be exploited to facilitate location tracking, call recording, and text message compromise, The Register reports.

Fortra's Core Security has conducted it's fourth annual survey of cybersecurity professionals on the usage and perception of pen testing. The data collected provides visibility into the full spectrum of pen testing’s role, helping to determine how these services, tools, and skills must evolve. Segment Resources: https://www.fortra.com/resources/gu...

Compliance with cyber security frameworks such as NIST, PCI, HIPAA, etc. have largely been driven by paper-based processes in Word and Excel. With the rise of cloud computing, containers, and ephemeral systems, paper-based processes can no longer keep up with the speed of business and compliance has become the new bottleneck to progress for highly...

Ensuring organizations have the proper governance, risk and compliance (GRC) practices is essential to ensuring risks are appropriately mitigated. Join us as we discuss the interconnectedness of risk, the process of GRC , and Michael’s thoughts on how to improve the process.

The current Federal Acquisition Regulation rule will soon apply the National Institute of Standards and Technology standard.

The Information Commissioner’s Office found TikTok used personal data tied to children under 13 without parental consent.

Erich Andersen, the general counsel of ByteDance, the Chinese company that owns TikTok, has defended the app's protection of the personal data of its U.S. users from the Chinese government, The Associated Press reports.

This week’s healthcare data breach roundup includes a massive vendor incident, a ransomware attack, and yet another provider reporting a pixel-related patient data exposure.