The Trump administration is already making good on its campaign promise to significantly rollback federal regulations. With change imminent, compliance and risk managers have found themselves in a fast-moving and unpredictable environment. Regulatory reform poses a unique challenge for compliance […]
Telltale Signs Your Compliance and Risk Management Program Needs a Tune-Up Read More »
I began my career in Information Security working for the Department of Defense, first for a Naval research facility, then Naval Intelligence, and finally with the National Security Agency. Information security for my first assignment meant locking your classified materials
Does DoD Level security Work in the Real World? Read More »
Should an organization be subject to a data breach, it could be a big problem for those affected, yet the organization may not be mandated to offer any kind of compensation. In this scenario, the risks associated with such a
Balancing Risk and Reward in IT Security Read More »
If your business collects, transmits, stores, or processes any type of payment card information, then you already know that compliance with PCI DSS is a fact of life. You — or your security team — most likely knows the standards
How to Make Your QSA-Led Assessment Go Smoothly Read More »
As the transition to a new Presidential administration unfolds, uncertainty abounds. Predictions about the regulatory landscape made before November may not ring as true, as Republicans look to make good on promises about smaller government and regulatory reform, particularly in
Three Reality Checks for Compliance and Risk Management in 2017 Read More »
In every aspect of our lives we are faced with automation. Options or choices that are automatically curated for us, so why not accounting? We order breakfast from options based on a restaurant’s recommendations. We request an Uber to drive
Automation: The Future of Financial Technology Read More »
In today’s business environment, IT management responsibilities often fall on the CFO, business owner or other senior leader when there’s no internal IT department. These individuals are tasked with running fail-proof IT departments – a challenging feat considering many have
5 Critical Considerations for Effective IT Decision Making Read More »
There’s a movement among certain analyst firms to promote the idea of eliminating access controls for all but the most sensitive data. It’s an interesting thought born out of a need to make user access easier and reduce the burden
Closing the Loopholes in Identity Governance to Minimize Risk Read More »
Box unveiled a new service today called Box Zones. Box is hailing Box Zones as a “breakthrough technology” that allows customers to take advantage of cloud storage while ensuring that data is securely stored within a given region. If you
Box Unveils Box Zones for Localized Regional Cloud Storage Read More »
One of the defining elements of DevOps is rapid change. Rapid change, in and of itself, is generally perceived as scary and bad by IT and security admins–and the exact opposite of what you need to achieve and maintain compliance.
Automate Compliance with DevOps Read More »
