Governance, Risk and Compliance

Before we begin, there’s one thing Anitian Director of Security Intelligence Jordan Wiseman wants to make clear: You can't outsource all compliance, including PCI compliance.

North Carolina's cybersecurity bill requires businesses that suffer a breach to notify affected consumers within 15 days. Patterson Belknap explains.

Set up an email client filter that sorts GDPR messages directly into spam ... but only if you've truly started your journey towards GDPR compliance early.

On May 25th, 2018, the European Union’s General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) goes into effect. Here's how to prepare.

Cyber risk governance requires strong executive leadership, a strategic framework for associated processes and related technological components.

GDPR will require organizations to notify the Supervisory Authority (SA) of a data breach within 72 hours of discovering the breach. Can companies comply?

Samanage USA, which offers cloud-based IT support services, agrees to pay a $264,000 settlement related to Vermont health care exchange breach.