Compliance
Compliance | News, how-tos, features, reviews, and videos
Data privacy in the IoT age: 4 steps for reducing risk
As internet of things (IoT) devices proliferate, corporate security teams face a steep challenge around data privacy. Here's what you can do now to protect your company.
What is the CCPA and why should you care?
CCPA is the law and the only way for a business to opt-out of it is to go out of business. For businesses that want to stay in business, however, CCPA is just the beginning of things to come.
5 ways compliance hurts security
The tasks of meeting regulatory requirements and providing true security that actually mitigates risk do not align. Here's how focusing exclusively on compliance can undermine security.
General Data Protection Regulation (GDPR): What you need to know to stay compliant
GDPR is a regulation that requires businesses to protect the personal data and privacy of EU citizens for transactions that occur within EU member states. And non-compliance could cost companies dearly. Here’s what every company that...
Review: FireMon clears the clutter for network security policy management
A pioneer in the field of network security policy management, FireMon provides full visibility into networks and devices, and overlays that knowledge with the rules, platforms, hardware and programs designed to protect it.
How to conduct a proper GDPR audit: 4 key steps
Organizations subject to the EU's General Data Protection Regulation should do regular compliance audits. Here are the steps experts say you should take.
FINRA Rule 4512: U.S. SEC approves electronic signatures
The updated FINRA Rule 4512(a)(3) is now in effect, striking a blow against outdated regulations.
What is "reasonable security"? And how to meet the requirement
Privacy regulations such as the GDPR and CCPA require companies to provide "reasonable security" to protect customers' personal information. Here's how you might best achieve that standard.
The case for continuous automated security validation
Organizations must truly understand their vulnerabilities at all times to make the right risk mitigation decisions. Continuous automated security validation can provide that.
How to report a data breach under GDPR
Data breach notification requirements are now mandatory and time-sensitive under GDPR. Here's what you need to report and who report it to.
Whip your information security into shape with ISO 27001
The ISO 27001 standard will help you identify potential threats to the confidentiality, integrity and availability of your company data. This simple checklist will help you come to grips with one of the best and most popular...
What are the new China Cybersecurity Law provisions? And how CISOs should respond
New provisions to the China Cybersecurity Law allow the Chinese government access to enterprise networks operating in the country. Although the security risk that presents is unclear, CISOs can take steps to minimize the impact.
Report: Over 59,000 GDPR data breach notifications, but only 91 fines
The low number of fines relative to the volume of reported breaches might be due to over-extended regulators, says a DLA Piper report.
![Computerworld - Scary Tech [Slide-05] - Encryption systems with backdoors](https://images.idgesg.net/images/article/2017/10/cw_scary_tech_05-100740219-small.3x2.jpg)
What is Australia's AA Bill and how will it affect US companies?
Australia's new AA Bill turns Australian employees and vendors into a supply chain security risk.
GDPR, I choose you! How the Pokémon Company embraces security and privacy by design
Pokémon Go forced the Pokémon Company International to rethink how it approaches security, and now uses GDPR as an enabler.
4 dangerous security assumptions to avoid
Many organizations take steps to guard against data breaches, employing new policies, tools and strategies that make them feel protected, but their defenses may not be as strong as they think. Unfortunately, this false sense of...
Top cybersecurity facts, figures and statistics for 2018
Looking for hard numbers to back up your sense of what's happening in the cybersecurity world? We dug into studies and surveys of the industry's landscape to get a sense of the lay of the land—both in terms of what's happening and how...
Gwinnett Medical Center investigating possible data breach
After being contacted by Salted Hash about a possible data breach, Gwinnett Medical Center, a not-for-profit network of healthcare providers in Gwinnett County, Georgia, has confirmed they're investigating what the healthcare provider...
-
White Paper
-
White Paper
