Blog
Page 32 of 153
ISO Compliance vs. Certification: What’s the Difference?
ISO certification means that a third party has independently validated that an organization conforms to standards established by the International Organization for Standardization (ISO). ISO compliance means that companies adhere to the requirements of ISO standards without the formal certification and recertification processes. To date, the ISO has developed over 22,000 international standards covering multiple […]
Tags: ISO
November 6, 2023
Who Needs PCI DSS Compliance?
If you are a company that processes debit or credit card payments online or in person, you may have heard of “PCI DSS” or the “PCI SSC.” These terms are related to security controls for sensitive data – specifically, the controls a retailer or payments processor should have to ward off cybersecurity threats and keep […]
Tags: PCI
What Is Segregation of Duties in Auditing?
Safeguarding the integrity of financial systems and protecting against fraud and errors are paramount concerns for any business. One way to address both of those threats is a concept called segregation of duties — a personnel tactic that promotes transparency and accountability throughout these systems. This article explores that concept, unpacking what makes it a […]
Tags: Audit Management, GRC
Should cyber insurance include ransomware protection?
In the modern digital age, the specter of ransomware looms large over businesses, governments, and individuals alike. The pervasive threat has led to a new question about an old (by technology standards, anyway) tool: Should cyber insurance coverage cover ransomware attacks? Cyber insurance has gained prominence in recent years due to the rise in cyber […]
November 3, 2023
PCI Compliance Checklist for Audits
The PCI Security Standards Council (PCI SSC) established PCI DSS as a framework for merchants and service providers to use in securing credit card and cardholder data from a breach. Annual audits to document your compliance with the Payment Card Industry Data Security Standard (PCI DSS), however, can be nerve-wracking and expensive. Preparing for that […]
Tags: Audit Management, PCI
November 1, 2023
ISO 9001 Quality Management Principles
Customers increasingly want a guarantee from businesses that the products and services the customers are buying have gone through quality management best practices. Adopting the ISO 9001 standard is one step towards offering a quality assurance guarantee. ISO 9001 is the most well-known international standard for Quality Management Systems (QMS), published by the International Organization […]
October 31, 2023
Compliance Metrics and KPIs For Measuring Compliance Effectiveness
“Corporate compliance” means that your company and its employees follow the laws, regulations, standards, and ethical practices applicable to your operating environment. In today’s data-driven landscape, however, compliance officers need quantitative measures to assess compliance performance. To do this, they must identify Key Performance Indicators (KPIs) for their compliance program. Tracking these KPIs provides deeper […]
Identifying Assets for IT Risk Analysis
Any organization that uses information technology should conduct cybersecurity risk assessments from time to time. Each organization, however, faces its own unique set of security risks and needs to tailor its approach to addressing those specific risks within its risk management processes. To get started, you first need to identify all your organization’s IT assets, […]
Identity Access Management Best Practices
In today’s unpredictable business environment, your organization is more important than ever to be protected against cybercrime. One of the best ways to ensure that your data is safe is to enforce Identity and Access Management (IAM) — a method for defining the roles and privileges of individual users within your network. Identity and access […]
Understanding PCI Cloud Compliance on AWS
If your company processes credit or debit card transactions you likely are already familiar with the Payment Card Industry Data Security Standard (PCI DSS). Compliance with these requirements is necessary to retain the right to process all the major credit card brands. Some companies process their transactions in the cloud using companies like Amazon Web […]
Page 32 of 153