Is your Compliance Driven by More Than an Audit?

Because of increasing threats, high-profile data breaches, and increased awareness of the damage they cause, we anticipate a substantial tightening of regulations and contractual requirements that will significantly impact information security in healthcare.

As many organizations that have hired QSAs recently have seen, the Report on Compliance (ROC) has changed quite dramatically for v1.2 of the PCI DSS standard from previous versions.

As a company, we’ve tried to understand which organizations are most likely to mature their information security programs.

You cannot protect what you cannot inventory: this piece argues IT asset management underpins every security program, defining what counts as an asset and the questions organizations must answer.

A reflection on how organizations lean on technology products as a cure-all for security problems they don't understand, buying standardized solutions that create a false sense of security.

Passing an annual ROC or SAQ is not enough—PCI DSS is meant as a foundation for year-round compliance. The author offers a cheat sheet to schedule and assign recurring DSS 2.0 maintenance tasks.