Data Breach Today

JULY 28, 2021

National Security Memo Requires NIST, CISA to Create Standards, But Compliance Is Voluntary President Joe Biden signed an executive national security memorandum on Wednesday calling for the development of new critical infrastructure cybersecurity standards for various industries.

Security 279

Security Compliance Cybersecurity 279

Data Breach Today

OCTOBER 8, 2024

Kivera Integrates Controls Into Cloudflare One to Prevent Cloud Misconfigurations With the acquisition of New York-based startup Kivera, Cloudflare will enhance its Cloudflare One platform, adding proactive controls that secure cloud environments, prevent misconfigurations and improve regulatory compliance for businesses using multiple cloud providers. (..)

Cloud 282

Cloud Security Compliance IT 282

The Last Watchdog

MAY 7, 2024

SAN FRANCISCO — Cloud security is stirring buzz as RSA Conference 2024 ramps up at Moscone Convention Center here. Related: The fallacy of ‘security-as-a-cost-center’ Companies are clambering to mitigate unprecedented exposures spinning out of their increasing reliance on cloud hosted resources.

Cloud 264

Cloud Security Compliance GDPR 264

Data Breach Today

AUGUST 12, 2020

Google Cloud Director, Formerly of CISA, Discusses Securing Government's Cloud Transformation Jeanette Manfra served under three presidents as one of the top U.S. government cybersecurity leaders. Now in her new role with Google Cloud, she draws upon her public sector experience to help agencies in their cloud adoption.

Compliance 264

Compliance Cloud Government Cybersecurity 264

The Last Watchdog

JANUARY 9, 2023

As the world becomes more digital and connected, it is no surprise that data privacy and security is a growing concern for small to medium sized businesses — SMBs. Large corporations tend to have the resources to deal with compliance issues. It should be no surprise that data security regulations are on the rise.

Data Privacy 210

Data Privacy Compliance Privacy GDPR 210

Data Breach Today

DECEMBER 27, 2023

Defense Department Proposes New Security Requirements for Defense Industrial Base The U.S.

Security 260

Security Compliance Cybersecurity 260

The Last Watchdog

JANUARY 13, 2022

Last month’s $125 million Security and Exchange Commission (SEC) fine combined with the $75 million U.S. While the price tag of these violations was shocking, the compliance failure was not. Related: Why third-party risks are on the rise. These views were echoed in a CFTC release as well. Insecure platforms.

Compliance 254

Compliance Customer Experience Communications Archiving 254

Data Breach Today

SEPTEMBER 15, 2022

Tech Companies Must Vow They Use Secure Software Development Techniques A White House agency today told U.S. federal government IT vendors they must attest to using secure software development techniques.

Security 241

Security Compliance Government IT 241

Data Breach Today

MAY 22, 2024

They highlighted the evolving roles of compliance and leadership and the importance of regulatory frameworks in ensuring robust and trustworthy AI deployment.

Compliance 147

Compliance Security 147

Data Breach Today

MAY 20, 2022

Deal Will Help Clients Secure Users and Data Across SAP and Oracle's ERP Apps Pathlock has merged with Appsian to form a 500-person vendor that secures users and data across SAP and Oracle's ERP apps.

Government 260

Government Security Compliance Marketing 260

The Last Watchdog

DECEMBER 18, 2024

Today, part three of Last Watchdog s year-end roundtable zeroes in on the regulatory and compliance landscape. Leila Powell , Head of Data, Panaseer In 2025, more organizations will face increased pressure to measure and demonstrate their security posture, especially as regulatory requirements expand.

Compliance 130

Compliance Cybersecurity Risk Privacy 130

Data Breach Today

NOVEMBER 16, 2023

Securities and Exchange Commission's requirement for publicly traded companies to report cyber incidents that have a material impact within four days is "not about playing gotcha with public companies," said the commission’s director of the corporation finance division.

Compliance 271

Compliance Security 271

The Last Watchdog

JULY 1, 2024

The coalescing of the next-gen security platforms that will carry us forward continues. Last Watchdog engaged Davinder Singh , Chief Technology Officer at Adaptiva, to drill down on the current state of securing networks. LW: What does this partnership signal about emergent security frameworks and platforms?

IT 278

IT Security Compliance Manufacturing 278

Data Breach Today

MAY 2, 2022

Latest FISMA Compliance Audit Finds a Variety of Issues Auditors have once again rated the Department of Health and Human Services' information security program as "not effective," citing several areas of weaknesses, including issues related to risk management, information security continuous monitoring and contingency planning.

Security 243

Security Information Security Compliance Risk 243

Data Breach Today

JULY 3, 2023

Talon CEO Ofer Ben-Noon discussed how his firm has built a DLP compliance model around generative AI services that blocks healthcare information or SWIFT data shared with ChatGPT.

Compliance 147

Compliance Security 147

KnowBe4

MARCH 1, 2024

Our team at KnowBe4 recently got together to talk about planning for annual security and compliance training.

Compliance 128

Compliance Security Security awareness 128

Data Breach Today

AUGUST 1, 2022

Glen Hymers of UK Cabinet Office on Keeping Communication Relevant Cybersecurity practitioners have gained the attention of corporate boards, but that attention must be converted into momentum, says Glen Hymers, head of Data Privacy and Compliance at the U.K. Cabinet Office.

Data Privacy 261

Data Privacy Security Compliance Communications 261

Security Affairs

JUNE 14, 2024

This regulation from the European Union (EU) is intended to both strengthen IT security and enhance the digital resilience of the European financial market. He suggested that it might be a “tough call for any organization to follow and to reach as a compliance deadline.”

Compliance 131

Compliance Insurance Risk Cloud 131

AIIM

OCTOBER 10, 2024

At the AIIM Information and Data Leadership Symposium on October 1, 2024, in Arlington, VA, James Crifasi (COO & CTO, RedZone Technologies) and Jay Leask (Principal Technical Architect, Microsoft) engaged in a fascinating discussion about defending and protecting unstructured data.

Unstructured data 165

Unstructured data Compliance Security 165

The Last Watchdog

JANUARY 27, 2022

Such consolidation across markets is good news for customers and vendors alike in terms of market growth and maximizing security investments. Throughout this period, the risk level of the acquirer is much higher than the acquired company, creating a major cybersecurity gap as they merge their tech stack and security tools together.

Privacy 265

Privacy Security Risk Marketing 265

The Last Watchdog

FEBRUARY 24, 2022

Now, let me give you a few reasons, why pen testing has emerged as a “must-have” security practice. For example, your website security may prove strong, applications not so much. A pen test can inform and help clarify security policies and strategies. Compliance, governance. Strategic positioning.

Security 233

Security Compliance Retail Risk 233

Data Breach Today

OCTOBER 11, 2024

New Cybersecurity Maturity Model Certification Rule Paves Way for Implementation The Department of Defense is set to implement significant changes to the Cybersecurity Maturity Model Certification program, effective October 15, streamlining compliance for contractors by introducing a tiered system while enhancing security standards.

Compliance 305

Compliance Cybersecurity Security 305

Data Breach Today

AUGUST 2, 2023

Companies are increasingly concerned about the security of applications built on open source components, especially when they’re involved in mergers and acquisitions. Just like copyright for works of art, each piece of open source software has a license that states legally binding conditions for its use.

Compliance 246

Compliance Security IT 246

Data Breach Today

JULY 7, 2021

LafargeHolcim's Manish Dave on Building a Framework Manish Dave, head of IT security and compliance at LafargeHolcim, a multinational company that manufactures building materials, describes two ways to implement the "zero trust" model: User-to-application and workload-to-workload segmentation.

Manufacturing 331

Manufacturing Compliance Security IT 331

Data Breach Today

AUGUST 29, 2024

Compliance Expert on Readiness, Compliance and Rapid Incident Reporting The NIS2 Directive focuses on addressing gaps and strengthening the security of network and information systems across the European Union.

Security 162

Security Compliance Cybersecurity 162

The Last Watchdog

MAY 25, 2022

According to recent data from Oracle and KPMG, organizations today employ over 100 cybersecurity products to secure their environments. Related: Taking a ‘risk-base’ approach to security compliance. This hybrid model has created exciting opportunities for employees and organizations and significantly raised the security stakes.

Security 222

Security Digital transformation Cybersecurity Compliance 222

Data Breach Today

MARCH 11, 2024

Sunil Dadlani, CIO and CISO of Atlantic Health System on AI Promise, Risks AI holds enormous potential for transforming and reimagining all aspects of healthcare, but mitigating the risks requires a collaborative, comprehensive approach prioritizing data security, regulatory compliance, and ethical considerations, said Sunil Dadlani, CIO and CISO at (..)

Compliance 297

Compliance Risk Security 297

Data Breach Today

OCTOBER 10, 2024

Thomvest Ventures Leads Series B Funding to Support Privacy and Security Compliance Relyance AI raised $32 million in Series B funding to grow its data governance platform.

Government 294

Government Privacy Compliance Security 294

The Last Watchdog

AUGUST 30, 2021

One of the most commonly repeated phrases in the security industry is, “Security teams hate their SIEM!”. Security Information and Event Management (SIEM) is not what it was 20 years ago. Here are five misconceptions, or myths, related to the SIEM, now security analytics platforms: • SIEMs are only good for compliance.

Analytics 230

Analytics Security Marketing Compliance 230

IT Governance

AUGUST 15, 2024

So, they’re subject to the PCI DSS (Payment Card Industry Data Security Standard). However, you can reduce your scope to drastically lower the number of requirements you must meet, thereby significantly reducing your compliance burden. Requirement 6: Develop and maintain secure systems and software. So, merchants think: ‘Great!

Compliance 116

Compliance Cloud Security Paper 116

Data Breach Today

OCTOBER 30, 2024

New Compliance Tool Say Many AI Firms Fail to Meet Security, Fairness Standards Large language models developed by Meta and Mistral AI are among a dozen artificial intelligence models that fail to meet the cybersecurity and fairness requirements of the European Union AI Act, which went into effect on Aug.

Artificial Intelligence 289

Artificial Intelligence Compliance Cybersecurity Security 289

The Last Watchdog

FEBRUARY 26, 2023

Of the numerous security frameworks available to help companies protect against cyber-threats, many consider ISO 27001 to be the gold standard. These updates address the growing risk to application security (AppSec), and so they’re critically important for organizations to understand and implement in their IT systems ASAP.

Security 203

Security Compliance Risk Ransomware 203

Data Breach Today

JULY 10, 2023

Security Vendor Will Provide Asset Discovery, Threat Detection to Industrial Firms Honeywell plans to purchase an OT security vendor founded by Israel Defense Forces veterans to deliver asset discovery, threat detection and compliance management to industrial organizations.

Security 176

Security Compliance Cybersecurity 176