HITRUST: Single Framework Strategy
Many organizations are in search of ways to streamline their compliance efforts. See how the HITRUST CSF can enable a “Single Framework Strategy” that simplifies security and compliance programs. Challenges [...]
How risk3sixty Uses SOC 2 to Demonstrate HIPAA Compliance
The AICPA-designated SOC 2 framework is used to express an opinion on controls over security, privacy, availability, confidentiality, and processing integrity for many different systems, organizations, and environments. In addition [...]
A GRC Tool is Not a GRC Program
A GRC tool can provide many benefits to your GRC program, as we’ve discussed before. However, before you go chasing shiny objects, you must understand what a GRC program is [...]
How to Provide Audit Evidence
So, you’ve been tasked with providing evidence for an audit. You may be wondering what your auditor is even looking for. Let’s take a look behind the scenes at why [...]
4 Benefits of a GRC Tool
A GRC tool can help an organization manage its governance, risk, and compliance program. But why use a GRC tool instead of managing your GRC program manually? GRC tools can [...]
The Virginia Consumer Data Privacy Act is Law: What Now?
Virginia’s Consumer Data Privacy Act (“VCDPA” or “the Act”) is the newest state privacy law in the U.S. In this blog, we will examine who is subject to the Act [...]
How to Scope & Segment Your PCI Environment
How should a company think about PCI Scope and Segmentation? For companies looking to identify and reduce the scope of their PCI environment, through network segmentation, it is necessary to [...]
How to Read a SOC 2 System Description
In this blog, we’ll dive into one of the most important parts of a SOC 2 report, the SOC 2 System Description! During your due diligence process, a vendor sends [...]
Maintaining A Compliant Business Continuity Environment
Do your business continuity plans account for your company’s compliance and regulatory requirements? For many, the answer to that question is “no”. An unfortunate reality encountered by companies across the [...]
Managing Ongoing PCI DSS Compliance
Maintain Compliance From our experience working with high-growth technology companies subject to a myriad of compliance obligations, maintaining security and privacy compliance initiatives throughout the year is a prominent challenge [...]