In Dec 2022, OU Health, a hospital in Oklahoma, notified about 3000 patients about a breach of their health data after an employee’s laptop was stolen. Sensitive data like treatments, social security numbers, and insurance details were compromised. The incident highlights the importance of implementing all types of security controls. But what are security controls?…
As cloud adoption accelerates, privacy compliance regulations like GDPR or CCPA are no longer just a sales blocker but compulsory. Designed to protect customers’ sensitive data, these compliance frameworks can become costly if ignored. Let’s take Yakima Valley Memorial Hospital, for example. After an investigation by the Office for Civil Rights, they paid $240,000 in…
There are two key contributors that have led to the rise of IT governance and for good. First, there is an increasing acknowledgement on IT concerns as business problems; IT is no longer seen as a siloed function. Second, IT professionals today need to think beyond data, tools, and processes to earn a seat at…
With cybercrime on the rise, more companies face the threat of data breaches, ransomware attacks, and other cybersecurity incidents. A data breach can harm more than just your computer system. It can tarnish your reputation and jeopardize your customers and employees. Surprisingly, among companies affected by data breaches, 76% say that the impact is as…
One of the best ways to adhere to security best practices is using a compliance framework. These guidelines offer a practical, step-by-step, and holistic approach to manage, monitor, implement, and maintain your security objectives. ISMS frameworks are the gold standard of improving posture and gaining customer trust. Let’s understand the most popular ISMS frameworks in…
Compliance, a complex subject, stirs varied emotions in businesses. First-timers find it overwhelming, juggling complex requirements and legal jargon. Ensuring everything gets done is easier said than done, but compliance memes add a touch of humor to the challenge. Some also see compliance as a mere checklist item—a necessary endeavour that is largely prompted by…