Compliance Management

DHS Inspector General Joseph Cuffari said he regularly deletes texts on his government-issued iPhone and does not believe he is required to preserve them under federal records laws.

Purchasing a network-security product means giving prospective vendors some tough questions to answer. Here's what you need to ask.

Seven leading AI companies met at the White House to discuss how the government will regulate artificial intelligence. Security was targeted as a top priority.

The U.S. Department of Health and Human Services has been urged by Sens. Ron Wyden, D-Ore., and Patty Murray, D-Wash., as well as Rep. Sarah Jacobs, D-Calif., to prevent warrantless access to reproductive and other health records, as well as mandate notifications from law enforcement regarding any patient record disclosure following the agency's release of a proposed update to the Health Insurance Portability and Accountability Act's privacy regulations, according to The Record, a news site by cybersecurity firm Recorded Future.

The U.S. Commerce Department's Bureau of Industry and Security has updated its Entity List to include spyware developers Intellexa and Cytrox AD due to threats posed by their commercial surveillance tools to U.S. national security, reports The Record, a news site by cybersecurity firm Recorded Future.

At a White House press event, the FCC said it wants to help consumers purchase smart devices that are less vulnerable to cyberattacks.

Try as they might to keep their clients in compliance with privacy and security regulations, managed services providers are still at the mercy of the organizations they serve. Unfortunately, companies don't always follow the MSSP's or vCISO's advice on items like responsible data stewardship, privacy policies and breach notification. If an attack d...