What is CMMC? CMMC stands for Cyber Security Maturity Model Certification. CMMC is a unifying standard for the implementation of cyber security across the Defense Industrial Base (DIB). The standard was released by the US Department of Defense (DoD) and became effective November 30th,
Reducing Privacy Risk with SOC 2®
Reducing Privacy Risk with SOC 2® Privacy compliance is centered on controlling the use of PII (Personal Identifiable Information) from your customers, clients, and, in some cases, employees. The definition of PII varies but is generally information that identifies or is reasonably capable of being
HIPAA, CCPA, and GDPR: Privacy or Information Security?
Many interdependencies exist between the security and privacy-related tasks demanded by compliance frameworks such as HIPAA, CCPA, and GDPR. The business implication is that enterprise security and privacy teams need to work together. Commercial platforms must also support this coordination – and
SOC 2 Type 2 Compliance and Certification
SOC 2 Type 2 Compliance and Certification What does SOC stand for? SOC stands for System and Organization Controls and represents a set of compliance standards developed by the American Institute of CPAs (AICPA) – a network of over 400,000 professionals across the globe. SOC Audits aim to
CCPA vs. GDPR
ABOUT GDPR GDPR distills data privacy law & regulation in the European Union (EU). It relates to processing and controlling personally identifying data and is applicable to entities holding or monitoring personal data. What is GDPR? The General Data Protection Regulation (EU) 2016/679 (GDPR)
What is FedRAMP?
Download our full FedRAMP Compliance Checklist here Established by The United States Office of Management and Budget (OMB) in 2012, the Federal Risk and Authorization Management Program, known as FedRAMP, is one of the federal government’s most rigorous security compliance frameworks. FedRAMP uses
PCI DSS Resource Guide
Welcome to the PCI DSS Resource Guide Did you know: Everyone storing, processing or transmitting cardholder information is required to follow the Payment Card Industry Data Security Standard (PCI DSS). It consists of 12 basic requirements grouped in 6 goals for establishing and maintaining a
What are the 6 Major Principles of PCI DSS?
What is PCI-DSS? PCI DSS is an acronym for “Payment Card Industry Data Security Standard.” This standard was developed by the PCI Security Standards Council. Any business which stores, process or transmits cardholder data must be compliant with PCI DSS. The PCI DSS standard establishes the