The Health Insurance Portability and Accountability Act of 1996 (HIPAA) aims to safeguard Protected Health Information (PHI) from theft and fraud. Not just doctors and nurses but anybody who handles medical records should undergo HIPAA training to be conversant with its requirements. Companies should conduct general awareness and role-specific HIPAA training programs. Should a breach…
Applications used in daily life collect large amounts of data through embedded trackers. This data could potentially be used in a cyber attack, leading to a violation of data privacy. According to Salesforce, 60% of their customers felt they had no control over how their personal data is used. The European Union established the General…
SaaS adoption has increased across the board, especially in large enterprises. Accelerated digital adoption is a result of the COVID-19 pandemic. It has added to the growing cybersecurity risks of today’s cloud-based environments. Cloud services provide large enterprises the opportunity to save costs and increase efficiencies. But, it requires them to share sensitive data with…
If you run a SaaS business and want to target mid-market or enterprise customers, you are going to be asked about the security posture of your company at one point or another. You may try to pass through them by answering security questionnaires but when your sales deal is stuck and cannot move forward because…
Information security is becoming a growing concern for cloud-hosted companies and the organizations are under constant pressure to meet the standard regulatory requirements. Understanding the differences between HITRUST vs SOC 2, although both HITRUST and SOC 2 compliance are industry-recognized certifications, will help cloud-hosted companies demonstrate privacy, security, and quality practices. TL;DR: The HITRUST certifications…
Key Points Introduction The Payment Card Industry Data Security Standard (PCI DSS) was created by the PCI Security Standards Council (PCI SSC) to protect sensitive transaction data and keep it secure from cybersecurity threats. The PCI SSC is an independent organization founded in 2006 by major payment card companies like American Express, MasterCard, Visa, JCB International,…
End of content
End of content