Assessment & Compliance Tools For Every IT Professional
 

compliance Tag

18 Jul

Posted at 13:21h in Compliance

The New York State Department of Financial Services (DFS) has been closely monitoring the ever-growing threat posed to information and financial systems by nation-states, terrorist organizations, and independent criminal actors, particularly against financial services organizations. In response, DFS established a set of rules and regulations...

04 Jul

Posted at 01:00h in Compliance

In order to protect their supply chain and its sensitive data, the United States Department of Defense (DoD) developed a cybersecurity standard, the Cybersecurity Maturity Model Certification (CMMC). The original version has been updated to CMMC 2.0, which replaced the original requirements.   While it will take...

27 Jun

Posted at 01:00h in Compliance

In 2013, the National Institute of Standards and Technology (NIST) was directed to create a “voluntary framework—based on existing standards, guidelines, and practices — for reducing cyber risks to critical infrastructure.”   Government agencies and contractors were required to implement cybersecurity programs defined in NIST Special Publications...

22 Jun

Posted at 01:00h in Compliance

Cyber Essentials is a UK government-based scheme that helps participating organizations protect themselves, regardless of size, against a range of common cyberattacks.  Cyberattacks come in many shapes and sizes, but the vast majority are very basic in nature, carried out by relatively unskilled individuals. They’re the...

23 May

Posted at 01:00h in Compliance

Specific industry IT security and privacy regulations such as PCI, HIPAA and GDPR apply to millions of organizations, with more regulations being enacted every month. But even those not REQUIRED to be in compliance with any standards should act as if they are – being...