Maintaining Information Security Compliance Through Active Directory Services

Because of increasing threats, high-profile data breaches, and increased awareness of the damage they cause, we anticipate a substantial tightening of regulations and contractual requirements that will significantly impact information security in healthcare.

The last few years have seen a great deal of discussion, arguing, hand-wringing, and posturing within the retail/hospitality community regarding the PCI DSS.

As a company, we’ve tried to understand which organizations are most likely to mature their information security programs.

Compliance frameworks like HIPAA, PCI-DSS, and NERC-CIP prove you are compliant, not secure; mature programs shift from checking boxes to risk-based, continuous monitoring of internet-facing assets.

Shows how PowerUpSQL finds domain SQL Servers, enumerates SQL logins with a standard domain account, and audits them at scale for weak passwords that often enable privilege escalation.

PCI SSC has released the ROC Reporting Instructions—the previously secret audit scorecard used by QSAs—to the public, so organizations can assess controls against the criteria auditors apply.