CSOonline

Looking for Information Security Control in a Global Business Climate

In 1891, Professor Fredrich Wieser wrote in his Theory of Value, “The idea of the importance of property only originates in scarcity. ” Applying this principle to computer and information security ...
Nextgov

FDIC fails to establish effective controls to secure sensitive data, report says

The agency tasked with supervising financial institutions nationwide is struggling to maintain effective information security measures, according to a new inspector general report. The Federal Deposit ...
Business Wire

HITRUST Finds Information Security Control Maturity is Key Indicator to Measuring and Predicting Cyber Risk

FRISCO, Texas--(BUSINESS WIRE)--HITRUST®, a leading data protection standards development and certification organization, today announced a new initiative to incentivize information security teams ...
Government Technology

Audit Faults CDT Cybersecurity Controls, Project Oversight

The state auditor’s office says in a new report that it’s keeping the California Department of Technology (CDT) on its list of “high-risk” agencies due to concerns about state departments’ information ...
Business Wire

ProcessUnity Achieves ISO/IEC 27001 Certification for Information Security Management Controls

BOSTON & DENVER--(BUSINESS WIRE)--ProcessUnity provider of comprehensive end-to-end third-party risk management and cybersecurity solutions to leading enterprises, today announced the company has ...
CSOonline

Queensland councils must strengthen information security controls

At least one Queensland council has suffered a cyberattack in 2023 and weakness in the information system controls continues to increase among councils. In April, one regional council in central ...
JD Supra

Let's Be Reasonable: Clearer Guidance for Minimum Information Security Standards

“Reasonable” and “adequate” seem like benign terms — until you have to litigate using them as a standard for adequate data security. Over the coming years, the definition of “reasonable security” (and ...

How this one-click Copilot attack bypassed security controls - and what Microsoft did about it

ZDNET's key takeaways Dubbed "Reprompt," the attack used a URL parameter to steal user data.A single click was enough to ...
Michigan Technological University

Frequently Asked Questions

Cybersecurity is the practice of protecting systems, networks, and programs from digital attacks. These cyberattacks are usually aimed at accessing, changing, or destroying sensitive information; ...
Forbes

Are Your And Your Vendors' Information Security Practices Backed By Experts?

A lot of the work I do, especially for clients regulated by the Department of Labor (DOL), involves third-party risk reviews. In 2021, the DOL released a list of cybersecurity best practices. Now, in ...
Nextgov

Audit: Labor Department Information Security Program ‘Not Effective’

Third-party auditors found deficiencies in the Labor Department’s information security and continuous monitoring controls. KPMG, which performed an audit released Tuesday by the Labor Department ...