Compliance

Compliance | News, how-tos, features, reviews, and videos

Cyber Trust Mark concept gains momentum with smart device and IoT manufacturers

What producers of IoT devices and software need to know about the growing movement to create a cybersecurity rating system similar to the Energy Star program for appliances.

Feb 6, 2024 9 mins

Compliance Security Infrastructure Security Practices

New risk management framework helps with SEC mandate compliance

The authors of the new Cyber Risk Management Program framework explain how it can set an organization up to better comply with SEC and other disclosure and reporting regulations.

Jan 4, 2024 10 mins

Compliance Laws and Regulations Risk Management

How the EU AI Act regulates artificial intelligence: What it means for cybersecurity

Critical infrastructure and other high-risk organizations will need to do AI risk assessments and adhere to cybersecurity standards.

Dec 13, 2023 12 mins

Compliance Generative AI Laws and Regulations

The SEC action against SolarWinds highlights how tough it can get for CISOs

Examining what went wrong with SolarWinds’ handling of cyberattack reporting provides a cautionary tale for aspiring and incumbent security leaders alike.

Dec 12, 2023 6 mins

CSO and CISO Cyberattacks Laws and Regulations

Accenture takes an industrialized approach to safeguarding its cloud controls

Security was once a hindrance for Accenture developers. But since centralizing the company's compliance controls, the process has never been simpler.

Dec 11, 2023 8 mins

Application Security Cloud Security Compliance

How a digital design firm navigated its SOC 2 audit

L+R's pursuit of SOC 2 certification was complicated by hardware inadequacies and its early adoption of AI, but a successful audit has provided security and business benefits.

Nov 28, 2023 11 mins

Certifications Compliance

Rise of the cyber CPA: What it means for CISOs

New accountant certification rules starting January 2024 could deliver many new cybersecurity-trained accountants. Is this good or bad news for CISOs?

Nov 27, 2023 7 mins

CSO and CISO Compliance

Ransomware gang files SEC complaint against company that refused to negotiate

New US Securities and Exchange Commission rules require reporting of breaches that are material, giving cyber extortionists a new tactic to coerce payments.

Nov 17, 2023 4 mins

Compliance Cybercrime Ransomware

How US SEC legal actions put CISOs at risk and what to do about it

CISOs could find themselves in a painful Catch-22 situation when the US Securities and Exchange Commission’s new cybersecurity rules are enacted in December.

Nov 16, 2023 8 mins

CSO and CISO Compliance Risk Management

Generative AI could erode customer trust, half of business leaders say

Businesses leaders admit their company needs to improve security and compliance measures as demands of customers, investors, and suppliers increase.

Nov 8, 2023 4 mins

CSO and CISO Compliance Generative AI