The Virginia Consumer Data Privacy Act is Law: What Now?
Virginia’s Consumer Data Privacy Act (“VCDPA” or “the Act”) is the newest state privacy law in the U.S. In this blog, we will examine who is subject to the Act [...]
How to Scope & Segment Your PCI Environment
How should a company think about PCI Scope and Segmentation? For companies looking to identify and reduce the scope of their PCI environment, through network segmentation, it is necessary to [...]
How to Read a SOC 2 System Description
In this blog, we’ll dive into one of the most important parts of a SOC 2 report, the SOC 2 System Description! During your due diligence process, a vendor sends [...]
Maintaining A Compliant Business Continuity Environment
Do your business continuity plans account for your company’s compliance and regulatory requirements? For many, the answer to that question is “no”. An unfortunate reality encountered by companies across the [...]
Managing Ongoing PCI DSS Compliance
Maintain Compliance From our experience working with high-growth technology companies subject to a myriad of compliance obligations, maintaining security and privacy compliance initiatives throughout the year is a prominent challenge [...]
Combining ISO 9001 and ISO 27001 Efforts
Key areas of overlap to help you harmonize workstreams. The compliance universe is ever-expanding. In addition to various information security requirements, often including ISO 27001, business partners are increasingly asking [...]
Webinar: The CISO Role: How to Design a Security Leadership Role Custom Fit to Your Organization
Check out our webinar from Shane Peden and Christian Hyatt in which they discuss common pitfalls of the CISO role as well as a framework to design a CISO role [...]
ISO 27001 vs SOC 2: Choosing a Compliance Framework
In a previous blog post, we discussed the differences between SOC 2 vs ISO 27001. In this post, we will look at the factors affecting the decision of choosing which [...]
SOC 2 vs ISO 27001: What’s The Difference?
Navigating the ins and outs of two of the most popular compliance frameworks. When it comes to vendor due diligence, many companies are raising the bar. This article will help [...]
Webinar | Everything You Need to Prepare for ISO 27701 Certification
Check out our webinar from Philip Brudney and Christian Hyatt in which they discuss everything you need to prepare for an ISO 27701 certification, including the link between ISO 27701 [...]