Compliance and Regulations

The SHIELD Act was enacted on July 25, 2019 as an amendment to the New York State Information Security Breach and Notification Act.

23 NYCRR 500 is a set of regulations from the NYDFS that places cybersecurity requirements on all financial institutions and financial services companies.

This is a complete overview of SOX Compliance. Learn how to ensure your organization is compliant with the SOX Act in this in-depth post.

This is a complete overview of the top 11 questionnaires for IT vendor assessment. Learn which security questionnaire is right for you in this in post.

The APRA CPS 234 prudential standard aims to ensure that regulated Australian entities can protect themselves from cybercrime and security incidents.

This is a complete overview of compliance monitoring best practices. Learn why compliance monitoring is required for many industries in this in-depth post.

Sensitive data is information that must be protected against unauthorized access.

FISMA is a United States federal law that defines a comprehensive framework to protect government information, operations, and assets against threats.

The Brazilian General Data Protection Law (Lei Geral de Proteção de Dados Pessoais or LGPD) is a law that was passed by the National Congress of Brazil.

This is a complete overview of security metrics. Learn how to use security metrics to maintain compliance with regulations in this in-depth post.

This is a complete guide to NIST SP 800-171. Learn how to comply with NIST SP 800-171 with this in-depth post.

This is a complete overview of the HIPAA Privacy Rule. Learn about what the Privacy Rule is and what you need to do to comply in this in-depth post.

Learn about the global costs of a data breach and how to implement the right defenses to protect your business.

Protected health information (PHI) is any information about health status, provision of health care or payment for health care that is created or collected

This is a complete overview of how to comply with Prudential Standard CPS 234. Learn about the key requirements and how to meet them in this in-depth post.

Service Organization Control 2 (SOC 2) is an auditing standard developed by the American Institute of Certified Public Accountants (AICPA).