Are you a government contractor trying to find out what is the Cybersecurity Maturity Model Certification (CMMC), and how it will affect your company? The Cybersecurity Maturity Model Certification (CMMC) will be the official certifying document to prove your company’s…
9 in 10 businesses will experience at least 1 cyber incident this year with just over 50% resulting in a data compromise. Regulatory and compliance requirements are increasingly become more stringent on notification and reporting obligations (e.g. GDPR, HIPAA, CCPA).…
It’s important for all of us to stay informed around the threats that exist in the ever-changing cybersecurity landscape. There is a new type of ransomware, Ryuk, that has been spreading over the past two months and is affecting an…
The HIPAA Security Rule specifically focuses on the safeguarding of ePHI and requires all HIPAA covered entities (CEs) and business associates (BAs) to ensure the confidentiality, integrity, and availability of the ePHI data that it creates, receives, maintains, or transmits…
One of the provisions of the HITECH Act is the notification of individuals affected by a breach of their electronic protected health information. There are certain requirements that must be followed and thresholds that apply to the breach notification regulation.…
Through the last decade, we have seen a humongous rise in technology and the use of mobile devices. At some point in the timeline, phones were just a medium of talking to people in real time without our actual presence.…
There may be times that business operations require certain exceptions be made to information security policies and procedures. This article provides some guidance and best practices on the exception management policy and how you can leverage it for your organization’s…
The purpose of the personnel security policy should be to establish controls on the hiring, training, and termination of all personnel (e.g. employees, contractors) to enforce compliance with the information security program. In addition, the organization should committ to providing…