Compliance Management

The cybersecurity agency said there is evidence that malicious hackers were able to reverse engineer an update fixing two of the vulnerabilities within 48 hours to create an exploit for unpatched systems.

The New York Assembly has unanimously approved legislation that would strengthen the cybersecurity defenses of its energy supply amid increasingly prevalent cyberattacks against power grids across the U.S., Government Technology reports.

BleepingComputer reports that nearly 3% of 2.8 million pages included in the 100,000 top ranking websites worldwide have been found to leak information entered in site forms including usernames, email addresses, passwords, and personal identifiers to third-party trackers prior to submission.

CISA and OMB update Congress on how federal agencies had complied with the Biden administration’s cybersecurity executive order as well as their push to implement zero-trust architectures across agencies and departments.

New cloud-based ethics and compliance cloud aims to help companies promote more transparent cultures and give them better tools to manage risk.

From HIPAA to CMMC to SOX, to name only a few, businesses have a patchwork of regulations to consider when establishing security policies.

What kind of risk does your organize have? And how do you enforce and update configuration policies within the enterprise, including but not limited to network, encryption, software, and hardware devices? These questions factor into risk management, and it's often a struggle.