Governance, Risk and Compliance

In theory, big breaches should trigger a surge in security spending. But don't overlook the other components of the security paradigm, Larry Walsh says.

A recent OCIE report is a valuable resource for any SEC-regulated firm looking to improve its cybersecurity compliance, Patterson Belknap asserts.

Anitian describes the ISO 27001 audit process and some important considerations surrounding the ISO compliance process.

A group of customers has the right to pursue a class action data breach lawsuit based on a 2014 cyberattack, a court recently ruled.

For ISO 27001 compliance and European General Data Protection Regulation (GDPR), you'll need an Information Security Management System (ISMS).

A Hertz rental car affiliate is paying a fine for weak cybersecurity. The twist? A service provider rather than Hertz was responsible for the issue.

The Revised Payment Services Directive (PSD2), an upcoming EC regulation, will have a massive impact on the Finance Industry. Martin Kuppinger explains why.

ISO 27001 compliance is the most direct path to alignment with General Data Protection Regulation (GDPR) and an excellent framework for internal governance.