- Chief Compliance Officer and VP of Legal Affairs, Arrow Electronics
By Adrianne Appel2023-08-23T20:17:00
Data security and compliance are not one and the same but have enough overlap that organizations can take steps when building a data security program to move closer to achieving compliance, according to an expert.
Terry Ray, senior vice president of data security and field chief technology officer at software provider Imperva, spoke Monday during a presentation at a conference in Las Vegas jointly sponsored by ISACA, formerly the Information Systems Audit and Control Association, and the Institute of Internal Auditors.
Ray’s session covered how regulators usually care about specific data, like birth records, so if an organization includes that regulated data in its overall cybersecurity program, it will move a few steps closer to data compliance.
You are not logged in and do not have access to members-only content.
If you are already a registered user or a member, SIGN IN now.
2023-12-28T16:28:00Z By Kyle Brasseur
The Department of Defense released for comment a proposed rule setting guidelines for implementation of the Cybersecurity Maturity Model Certification program.
2023-10-17T13:46:00Z By Matt Honea, CW guest columnist
The need to prove network compliance is intensifying as lawmakers introduce new privacy legislation and organizations update their contractual security requirements for third-party vendors.
2023-10-05T19:58:00Z By Adrianne Appel
The timing of a recent cyberattack against Clorox juxtaposed against the Securities and Exchange Commission’s adoption of its cybersecurity incident disclosure rule soon to take effect has presented a case study regarding how companies might seek to meet the requirements of the rule.
2025-03-28T14:22:00Z By Thomas Graham, CW guest columnist
Many small organizations within the Defense Industrial Base are struggling to meet the rigorous requirements validated through the Cybersecurity Maturity Model Certification, writes Thomas Graham, CISO at Redspin. If you haven’t been tracking it closely, CMMC was finalized in October, with an effective date of December 16, 2024.
2025-02-10T15:27:00Z By Rezaul Karim, CW guest columnist
The dark web has been depicted as a long-standing hub for crimes, where illegal activities such as drug dealing, financial fraud, weapon sales, murder for hire, stolen credit cards, and ransomware gags are easily accessible to the public.
2024-10-08T14:13:00Z By Jeff Dale
American Water Works Company, which supplies drinking water and wastewater to 14 million customers, disclosed a breach of its computer networks and system due to a cybersecurity incident.
Site powered by Webvision Cloud