All Compliance related articles

As cyberattacks on the U.S. Department of Defense (DoD) supply chain grow more frequent and sophisticated, compliance with the Cybersecurity Maturity Model Certification (CMMC) framework has become a critical requirement…

The General Data Protection Regulation (GDPR) is the world’s flagship data protection regulation. Its comprehensive approach to data privacy and wide-ranging implications make it a benchmark for all new data privacy…

The foundation for today’s increasingly digitized world must be built upon trust and transparency. If people don’t feel in control of their personal data and how it’s used, they’ll fail to trust the data-driven digital services…

The Payment Card Industry Data Security Standard (PCI DSS) is a set of security requirements that helps organizations protect their payment systems from data breaches, fraud, and theft of cardholder data. It resulted from…

NIST 800-171 compliance is a crucial standard for organizations handling Controlled Unclassified Information (CUI), especially those working with the US federal government. Developed by the National Institute of Standards…

The latest revision of the ISO 27001 security standard (ISO 27001:2022) was announced in 2022. To ensure the standard keeps pace with modern cybersecurity challenges, the ISO implemented a number of new controls and updates…

Data breaches have become a frequent headline, making the importance of implementing a robust data security strategy critical. This urgency is echoed in the ever-evolving landscape of compliance regulations worldwide.…

The introduction of the General Data Protection Regulation (GDPR) in May 2018 set a high bar in privacy protection for individuals within European Union (EU) member states. The data privacy landscape in the US has changed…

Data Loss Prevention (DLP) has evolved from a luxury to a necessity. It’s a robust measure to prevent unauthorized access, data breaches, and data leakage of sensitive information. But with numerous DLP solutions…

Across the world, organizations of all sizes are involved in the sharing and storage of critical data, making data protection laws a priority. Stephen Mathias from Kochhar & Co. reports that in early August 2023, the…

Whether motivated by high-profile data breaches or an increasing unease about how companies use and misuse personal data, jurisdictions across the United States are implementing more stringent data privacy regulations.…

July 1, 2023, marked the enforcement date of The California Privacy Rights Act (CPRA). Companies have been given sufficient time to implement necessary changes to comply with this data privacy law, which protects residents’…