Governance, Risk and Compliance

Strict new cybersecurity regulations for pipeline owners and operators issued after the Colonial Pipeline ransomware attack will "transition to a performance-based model that will enhance security and provide the flexibility."

PCI DSS v4.0 was released on March 31st, 2022 and we've got Jeff Man joining us today to discuss some of the more notable changes that folks should be aware of. Some great resources from Jeff and his employer on PCI 4.0: https://info.obsglobal.com/pci-4.0-resources And the PCI Council's own summary of changes between PCI 3.2.1 and 4.0: https://se...

An overwhelming consensus in healthcare lauds the PATCH Act and the forthcoming updates to the FDA medical device cybersecurity guide to secure new devices. But there’s still no solution for legacy tech in healthcare.

Concern raised over incident-reporting regulations for critical infrastructure and publicly traded companies under development by CISA and the SEC, respectively, may overlap.

As it stands, the current method for healthcare providers to receive feedback is through a HIPAA breach investigation by Health and Human Services, according to a GAO report.

A Chinese-aligned information operation known as Dragonbridge targeted American, Australian, and Canadian rare earth mineral companies in an apparent bid to shore up Chinese market dominance, researchers at Mandiant announced Tuesday.

Join the former Privacy Commissioner of Ontario, Canada and creator of PrivacyByDesign (PbD), translated into 40 languages and incorporated into General Data Protection Regulation (GDPR) and used by many organizations to proactively “bake-in” privacy into our systems. Every CISO needs to pay attention to and support the various country privacy laws...