A fine of $145 million and a ban from processing card payments for 14 months. That was the PCI DSS fine Heartland paid for data theft of 100 million debit and credit card data from their site in 2008/2009. Target was another recent recipient of PCI DSS fines—they paid $18.5 million in settlements and $202…
Vint Cerf, one of the internet’s pioneers, is said to have coined the term “Cyber Hygiene” by cleverly comparing brushing teeth to protecting one’s online security. Whether this story is fact or completely invented, it makes sense. Just like brushing your teeth is a preventive measure against decay and disease, maintaining good cyber hygiene helps…
In today’s day and age, a company’s security posture is defined by the effectiveness of its internal controls. Every malicious act or security incident is a direct result of either inefficient implementation or the improper functioning of internal controls. Sure, organizations can piece together a great number of preventive measures but that doesn’t address the…
An underprepared business is one risk materialization away from a tenuous period of operational disruptions, economic downturn, and reputational damage. Risk is a constant in the cybersecurity realm, and while most businesses realize this, their risk readiness says otherwise. According to the 2024 State of Risk Oversight Report, 27% of organizations do not have an…
Amidst the dance of commerce, the internal control system is a silent watchdog. It does not always make the headlines in case of breaches or system crashes, but the consequences can be devastating when controls are not in place. Case in point: A fine of $136 million was levied on Citigroup by the US regulatory…
If you are on a journey to undertake SOC 2 compliance for your business, it can be confusing to sort through the reams of information and arrive at some form of clarity. This matter is made even more complicated by the prevailing Fear, Uncertainty, and Doubt in the market created by unscrupulous vendors who peddle…