Governance, Risk and Compliance

Risk transfer (which includes cyber insurance) is a valid way to deal with cybersecurity risk. But does that mean you can invest less in security?

Some vendors make “GDPR compliant” marketing claims for their applications & SaaS options. In reality, neither SaaS nor applications can be GDPR compliant.

Is the financial services industry ready to comply with New York’s Department of Financial Services (DFS) cybersecurity regulation? Research suggests no.

Service Organization Control (SOC) 2 certification is a must-have certification for software as a service (SaaS) companies. Anitian, an MSSP, explains why.

The U.S. Department of Health & Human Services’ Office for Civil Rights (“OCR”) releases of an updated web tool that highlights recent HIPAA data breaches.

Account registration is a critical activity on many websites. It must be secure & frictionless. To improve the user experience (UX) focus on these areas.

A data privacy audit should include the following areas and best practices, according to the ISACA.