Compliance - Security Ticks

$500,000 HHS Fine Underscores the Need for Security and Compliance in Healthcare

Compliance, data breach, Database Protection, DFIR, Managed Detection and Response, Vulnerabilities / SecurityTicks

$500,000 HHS Fine Underscores the Need for Security and Compliance in Healthcare 2024-11-01 at 15:02 By With the rise in cyberattacks and ransomware incidents, healthcare organizations face an increasing risk of data breaches that threaten patient privacy and HIPAA compliance. This article is an excerpt from Trustwave Blog View Original Source React to this headline:

React to this headline:

$500,000 HHS Fine Underscores the Need for Security and Compliance in Healthcare Read More »

SEC fines tech companies for misleading SolarWinds disclosures

Avaya, Check Point, Compliance, cyber risk, Don't miss, Mimecast, News, SolarWinds, Unisys / SecurityTicks

SEC fines tech companies for misleading SolarWinds disclosures 2024-10-25 at 15:07 By Help Net Security The Securities and Exchange Commission charged four current and former public companies – Unisys Corp., Avaya Holdings Corp., Check Point Software Technologies Ltd, and Mimecast Limited – with making materially misleading disclosures regarding cybersecurity risks and intrusions. The SEC also

React to this headline:

SEC fines tech companies for misleading SolarWinds disclosures Read More »

How NIS2 will impact sectors from healthcare to energy

CISO, Compliance, cybersecurity, Don't miss, EU, Features, framework, Hot stuff, News, opinion, Risk Management, security standard, Splunk, strategy / SecurityTicks

How NIS2 will impact sectors from healthcare to energy 2024-10-17 at 07:02 By Mirko Zorz In this Help Net Security interview, Mick Baccio, Global Security Advisor at Splunk SURGe, discusses the far-reaching implications of the NIS2 Directive beyond traditional IT security. He explains how NIS2 will fundamentally change cybersecurity governance, making it a core aspect

React to this headline:

How NIS2 will impact sectors from healthcare to energy Read More »

CISOs’ strategies for managing a growing attack surface

attack, CISO, Compliance, cybersecurity, Detectify, digital transformation, Don't miss, Features, Hot stuff, News, opinion, regulation / SecurityTicks

CISOs’ strategies for managing a growing attack surface 2024-10-14 at 07:03 By Mirko Zorz In this Help Net Security interview, Rickard Carlsson, CEO at Detectify, discusses the evolution of attack surface management in the context of remote work and digital transformation. Carlsson highlights the challenges CISOs face today, including maintaining visibility and managing compliance in

React to this headline:

CISOs’ strategies for managing a growing attack surface Read More »

How Microsoft E5 Security Helps Protect Healthcare and Patient Data

Compliance, Database Protection, database security, Microsoft Security, SIEM/SOC, Tips & Tricks / SecurityTicks

How Microsoft E5 Security Helps Protect Healthcare and Patient Data 2024-10-10 at 16:01 By In the healthcare industry, safeguarding patient data is not just a regulatory requirement but a moral imperative. This article is an excerpt from Trustwave Blog View Original Source React to this headline:

React to this headline:

How Microsoft E5 Security Helps Protect Healthcare and Patient Data Read More »

Balancing legal frameworks and enterprise security governance

boardroom, Coalfire, Compliance, cybersecurity, Don't miss, Features, framework, Hot stuff, Incident Response, News, opinion, regulation / SecurityTicks

Balancing legal frameworks and enterprise security governance 2024-10-10 at 07:01 By Mirko Zorz In this Help Net Security interview, Tom McAndrew, CEO at Coalfire, discusses the balance organizations must strike between legal compliance and effective enterprise security governance in the context of evolving regulatory frameworks. McAndrew also addresses the need for clear governance structures and

React to this headline:

Balancing legal frameworks and enterprise security governance Read More »

Transforming cloud security with real-time visibility

cloud security, Compliance, cybersecurity, Don't miss, Features, Hot stuff, Innovation, misconfiguration, News, opinion, standards, Upwind / SecurityTicks

Transforming cloud security with real-time visibility 2024-10-07 at 07:31 By Mirko Zorz In this Help Net Security interview, Amiram Shachar, CEO at Upwind, discusses the complexities of cloud security in hybrid and multi-cloud environments. He outlines the need for deep visibility into configurations and real-time insights to achieve a balance between agility and security. Shachar

React to this headline:

Transforming cloud security with real-time visibility Read More »

Enhancing firewall management with automation tools

automation, Compliance, cybersecurity, Don't miss, Features, firewall, Hot stuff, News, opinion, Tufin / SecurityTicks

Enhancing firewall management with automation tools 2024-10-02 at 08:01 By Mirko Zorz In this Help Net Security interview, Raymond Brancato, CEO at Tufin, discusses the considerations organizations must weigh when selecting a next-generation firewall to effectively balance security needs with network performance. What factors should organizations prioritize when selecting a next-generation firewall to balance security

React to this headline:

Enhancing firewall management with automation tools Read More »

CMMC 2.0: A Roadmap to Compliance with Trustwave

Compliance, Government, Microsoft Security / SecurityTicks

CMMC 2.0: A Roadmap to Compliance with Trustwave 2024-10-01 at 16:01 By The U.S. Department of Defense (DoD) Cybersecurity Maturity Model Certification (CMMC) 2.0 has passed through the Office of Information and Regulatory Affairs and is now on its way to Congress, set to become law by Q4 2024. With the CMMC becoming official law, its full

React to this headline:

CMMC 2.0: A Roadmap to Compliance with Trustwave Read More »

Trustwave Adds a Twist to Cybersecurity Awareness Month: More Security!

Compliance, email security, Managed Detection and Response, Tips & Tricks / SecurityTicks

Trustwave Adds a Twist to Cybersecurity Awareness Month: More Security! 2024-09-30 at 16:01 By October 1 marks the start of Cybersecurity Awareness Month and traditionally Trustwave has discussed the general security concepts highlighted by the Cybersecurity and Infrastructure Security Agency (CISA), and National Cybersecurity Alliance (NCSA). However, this year Trustwave will take a slightly different approach. In the same

React to this headline:

Trustwave Adds a Twist to Cybersecurity Awareness Month: More Security! Read More »

Compliance management strategies for protecting data in complex regulatory environments

access control, auditing, Compliance, cybersecurity, Don't miss, Features, Hot stuff, monitoring, News, NordLayer, opinion, regulation, strategy, tips / SecurityTicks

Compliance management strategies for protecting data in complex regulatory environments 2024-09-26 at 07:02 By Mirko Zorz In this Help Net Security interview, Andrius Buinovskis, Head of Product at NordLayer, discusses how organizations can assess their compliance management and ensure they meet regulatory requirements. Buinovskis also addresses the challenges of managing multiple frameworks and offers strategies

React to this headline:

Compliance management strategies for protecting data in complex regulatory environments Read More »

How cyber compliance helps minimize the risk of ransomware infections

Compliance, cybersecurity, Cypago, framework, News, Ransomware / SecurityTicks

How cyber compliance helps minimize the risk of ransomware infections 2024-09-24 at 07:01 By Help Net Security Over the past decade, ransomware has been cemented as one of the top cybersecurity threats. In 2023 alone, the FBI received 2,385 ransomware complaints, resulting in over $34 million in losses. To help businesses combat ransomware and other

React to this headline:

How cyber compliance helps minimize the risk of ransomware infections Read More »

Essential metrics for effective security program assessment

Compliance, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, penetration testing, Pentera, security controls, security testing, SOC / SecurityTicks

Essential metrics for effective security program assessment 2024-09-19 at 07:02 By Mirko Zorz In this Help Net Security interview, Alex Spivakovsky, VP of Research & Cybersecurity at Pentera, discusses essential metrics for evaluating the success of security programs. Spivakovsky explains how automation and proactive testing can reveal vulnerabilities and improve overall security posture. What are

React to this headline:

Essential metrics for effective security program assessment Read More »

AT&T to Pay $13 Million in Settlement Over 2023 Data Breach

AT&T, Compliance, Data Breaches, fcc, settlement / SecurityTicks

AT&T to Pay $13 Million in Settlement Over 2023 Data Breach 2024-09-18 at 15:31 By Ionut Arghire AT&T has agreed to pay $13 million in a settlement with the FCC over a 2023 data breach at a third-party vendor’s cloud environment. The post AT&T to Pay $13 Million in Settlement Over 2023 Data Breach appeared

React to this headline:

AT&T to Pay $13 Million in Settlement Over 2023 Data Breach Read More »

Compliance frameworks and GenAI: The Wild West of security standards

Application Security, automation, Compliance, cybersecurity, Don't miss, Features, generative AI, Hot stuff, News, opinion, penetration testing, regulation, software, SplxAI / SecurityTicks

Compliance frameworks and GenAI: The Wild West of security standards 2024-09-16 at 07:01 By Mirko Zorz In this Help Net Security interview, Kristian Kamber, CEO at SplxAI, discusses how security challenges for GenAI differ from traditional software. Unlike predictable software, GenAI introduces dynamic, evolving threats, requiring new strategies for defense and compliance. Kamber highlights the

React to this headline:

Compliance frameworks and GenAI: The Wild West of security standards Read More »

Top priorities for federal cybersecurity: Infrastructure, zero trust, and AI-driven defense

Booz Allen Hamilton, Compliance, critical infrastructure, cybersecurity, Don't miss, Features, framework, Government, News, opinion, Risk Management, USA / SecurityTicks

Top priorities for federal cybersecurity: Infrastructure, zero trust, and AI-driven defense 2024-09-12 at 07:01 By Mirko Zorz In this Help Net Security, Erica Banks, VP and a leader in Booz Allen’s civilian services business, discusses the Federal Cybersecurity Strategy’s role in safeguarding national assets. Banks outlines key areas for improvement, including funding, talent retention, and

React to this headline:

Top priorities for federal cybersecurity: Infrastructure, zero trust, and AI-driven defense Read More »

Compliance and Risk Management Startup Datricks Raises $15 Million

Artificial Intelligence, Compliance, Datricks, Funding/M&A, Series A, Team8 / SecurityTicks

Compliance and Risk Management Startup Datricks Raises $15 Million 2024-09-11 at 18:34 By Ionut Arghire The Tel Aviv company attracts $15 million in a Series A investment to build an AI-powered compliance and risk management platform. The post Compliance and Risk Management Startup Datricks Raises $15 Million appeared first on SecurityWeek. This article is an

React to this headline:

Compliance and Risk Management Startup Datricks Raises $15 Million Read More »

How AI and zero trust are transforming resilience strategies

access control, Active Directory, Compliance, cyber resilience, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Quest Software, regulation, Risk Management, strategy, zero trust / SecurityTicks

How AI and zero trust are transforming resilience strategies 2024-09-11 at 07:01 By Mirko Zorz In this Help Net Security interview, John Hernandez, President and General Manager at Quest Software, shares practical advice for enhancing cybersecurity resilience against advanced threats. He underscores the need to focus on on-premises and cloud environments, adapt to new regulations,

React to this headline:

How AI and zero trust are transforming resilience strategies Read More »

Cybersecurity Threat Briefing for Organizations Under the SOCI in Australia

Compliance, Government, Threat Intelligence / SecurityTicks

Cybersecurity Threat Briefing for Organizations Under the SOCI in Australia 2024-09-06 at 16:18 By Grant Hutchons The Security of Critical Infrastructure (SOCI) Act in Australia mandates that organizations operating within critical infrastructure sectors implement robust cybersecurity measures to protect against an increasingly diverse and sophisticated range of cyber threats. This article is an excerpt from

React to this headline:

Cybersecurity Threat Briefing for Organizations Under the SOCI in Australia Read More »

Complying with PCI DSS requirements by 2025

Compliance, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, Integrity360, News, opinion, PCI DSS / SecurityTicks

Complying with PCI DSS requirements by 2025 2024-09-02 at 12:31 By Help Net Security Version 4.0.1 of the Payment Card Industry Data Security Standard (PCI DSS), which came into effect back in April, incorporates a few important changes to make it fit for the modern digital world, addressing how technologies, the threat landscape and payment

React to this headline:

Complying with PCI DSS requirements by 2025 Read More »