Governance, Risk and Compliance

Now that strict data-management regulations like the GDPR and CCPA are in place, identity audits are a near-necessity for online organizations. Here’s how identity auditing works, how to carry out an identity audit and how customer identity and access management (CIAM) solutions may help automate the audit process.

On the heels of an earlier Verizon report showing the ongoing rise in healthcare web app attacks, the Department of Health and Human Services Cybersecurity Coordination Center issued guidance on threat actor tactics and possible remediation strategies.

Most current security risk assessments are not effective. Doug Landoll joins BSW to explain how we can fIx this. Doug will share 5 Essential Elements of an Effective Security Risk Assessment, including: Scoping, Scheduling, and Champions Team Structure Data and Measurements Calculations and Analysis Reporting, Presentation, and Tracking

Acrisure, a provider of cyber insurance and managed detection and response (MDR), acquired the Catalyst Technology Group and ITS Inc. for an undisclosed amount, MSSP Alert reported.

NIST is seeking industry feedback on its updated healthcare cybersecurity insights, which have a renewed focus on HIPAA implementations. Meanwhile, the Cloud Security Alliance unveiled a third-party risk guide for healthcare.

Traditional cybersecurity training is boring and ineffective for many employees. Here’s how to switch to dynamic, interactive training that will keep your workforce engaged, optimized, and prepared.

Microsoft’s announcement earlier this month that it would set internet macros to be blocked by default in Office applications is causing quite a conundrum for financial institutions and the security providers that work with them.

The Proactive Cyber Initiatives Act of 2022, introduced by Rep. Eric Swalwell, D-Calif., would insert language into federal law that explicitly puts the Office of the National Cyber Director in charge of “deconflicting overlapping jurisdictions between agencies regarding cybersecurity activities and authority to mitigate risks.”