A new tool to provide easy execution of the FFIEC CAT framework [2019]
4 Steps CISOs Use To Optimize Data Security
All organizations that handle credit card or other types of payment card data must effectively and efficiently meet all of the various sections of PCI DSS 3.2 for PCI compliance and data security. Just like SOX or GDPR compliance, a failure to protect cardholder data can result in stiff penalties and fines as well as associated costs in settlements, legal fees and reputation loss. Many CISO’s have stated that a…
How CISO’s protect their sensitive data in the cloud
Today, all companies in every market segment face a perfect storm of risk as they are besieged by internal, external, regulator and reputational risk. Yet for CISO’s and ISO’s, getting the security budget to combat those threats can be a challenge. The newest report by Price Waterhouse Coopers (PWC)1 provides some undeniable facts that all CISO’s and ISO’s can use to support their security budget and receive the funding they…
[Scott Giordano] Appeared in Information Management With all of the attention now being paid to data privacy, many Americans are wondering who’s looking out for their personal information online and many organizations are seeking clarity around meeting compliance regulations and preparing for future changes. To help answer those questions, Information Management spoke with data privacy expert Scott Giordano for his advice on how companies and brands should be approaching data…
What does it mean to be compliant? Compliance is the state of following rules and regulations and conforming to specifications, policies, standards or laws within those regulations. There are data security rules that can come from industry or legislative compliance guidelines. Every company may have their own data security compliance standards that vary. Financial institutions and medical companies likely have various requirements and policies for storing data for their company…
(by Todd Feinman, Spirion Co-Founder and Chief Strategy Officer) Data Discovery and Classification The holiday season is typically when data breaches often occur. We’ve seen significant news stories about breaches at Starwood Hotels and Quora. Around the holidays in 2017, it was announced that there was a significant privacy leak at eBay affecting many customers. And, it was just before the holidays in 2013 that Target announced the infamous breach…