FFIEC Cybersecurity Assessment Tool Sunset: What Comes Next

FFIEC Cybersecurity Assessment Tool Sunset: What Comes Next

The Federal Financial Institutions Examination Council (FFIEC) has officially announced that its Cybersecurity Assessment Tool (CAT) will…
What Is FIPPA? Canada's Provincial FOI and Privacy Laws

What Is FIPPA? Canada's Provincial FOI and Privacy Laws

FIPPA is not a single national law. The Freedom of Information and Protection of Privacy Act is…
White House and CISA Double Down on Securing Open Source Software: A New Era of Vigilance

White House and CISA Double Down on Securing Open Source Software: A New Era of Vigilance

In April, the tech world faced a concerning incident involving XZ Utils, a widely used open-source compression…
BC PIPA: British Columbia's Private-Sector Privacy Law

BC PIPA: British Columbia's Private-Sector Privacy Law

What is BC PIPA? British Columbiaโ€™s Personal Information Protection Act (PIPA), SBC 2003, c. 63, is the…
Risk Register Templates: Enhance Your Risk Management

Risk Register Templates: Enhance Your Risk Management

In a world full of uncertainties, how do you keep your business risks in check?  Today, weโ€™re…
Colorado New AI Act: Everything you Need to Know

Colorado New AI Act: Everything you Need to Know

Updated November 2026: Colorado repealed and replaced SB 24-205 with SB 26-189, signed May 14, 2026, which…
Security Metrics for NIST CSF 2.0: Transitioning From 1.0

Security Metrics for NIST CSF 2.0: Transitioning From 1.0

The NIST Cybersecurity Framework (CSF) has long served as a cybersecurity cornerstone, offering a structured approach to…
Massive Data Breach Exposes Personal Information of Billions

Massive Data Breach Exposes Personal Information of Billions

A data breach at National Public Data, a relatively obscure but widely connected company, has exposed 272…
The Key Components of HRIPA Compliance

The Key Components of HRIPA Compliance

Data breaches and privacy concerns are all too common today. Thatโ€™s why the Australian Health Records and…
Whistle While You Work

Whistle While You Work

The DOJ rolled out its Corporate Whistleblower Awards Pilot Program this month. The initiative incentivizes whistleblowers who…
Deltaโ€™s Mirror Moment: A Play of Third-Party Reflection

Deltaโ€™s Mirror Moment: A Play of Third-Party Reflection

Setting: Two friends, Delta Air and Crowd Strike, sit at a corner table, sipping their drinks and…
The Great Cyber Debate: Regulation vs. Innovation

The Great Cyber Debate: Regulation vs. Innovation

As the 2024 presidential election draws near, the candidates’ positions on cybersecurity and tech regulation will likely…
ISO/IEC 42001: What You Need to Know

ISO/IEC 42001: What You Need to Know

Artificial Intelligence (AI) has become a transformative force across industries. However, with the rapid advancement of AI…
CrowdStrike Outage

CrowdStrike Outage

On July 19, 2024, CrowdStrike released an update intended to beef up security on Microsoft Windows systems.…
How is "Materiality" Defined According to the SEC Disclosure Rules?

How is "Materiality" Defined According to the SEC Disclosure Rules?

Several auto dealers affected by the CDK breach have felt compelled to notify the SEC, indicating that…
Cloud Data Security: Importance, Challenges and Best Practices

Cloud Data Security: Importance, Challenges and Best Practices

In the era of big data, companies generate and store vast amounts of information. This data takes…
Best Strategies to Reduce Generative AI Risk

Best Strategies to Reduce Generative AI Risk

Generative AI stands as one of the most transformative technologies of our era. However, with its vast…
The 10 Best Vendor Risk Management Tools

The 10 Best Vendor Risk Management Tools

Let’s discuss an acronym reshaping the business world: Vendor Risk Management, or VRM. Once an abbreviation that…
AI Risk Assessment and Regulatory Compliance: A Guide

AI Risk Assessment and Regulatory Compliance: A Guide

The Promise and Perils of Generative AI The potential of generative AI is immense. It promises to…
Balancing Act: Streamlining Federal Cybersecurity Regulationsย 

Balancing Act: Streamlining Federal Cybersecurity Regulationsย 

A new bipartisan bill, the Streamlining Federal Cybersecurity Regulations Act, introduced by Senators Gary Peters (D-Mich.) and…
The American Privacy Rights Act: What You Need to Know

The American Privacy Rights Act: What You Need to Know

The American Privacy Rights Act (APRA) was not enacted. Rep. Cathy McMorris Rodgers introduced it in the…
Top Cybersecurity Websites and Blogs for Compliance in 2025

Top Cybersecurity Websites and Blogs for Compliance in 2025

In the dynamic realm of compliance, staying abreast of regulatory changes, industry trends, and best practices is…
Auto Sales Hit a Cyber Speedbumpย 

Auto Sales Hit a Cyber Speedbumpย 

A recent cyberattack has put a speed bump in the path of automakers like Ford and General…
AI Auditing: Ensuring Ethical and Efficient AI Systems

AI Auditing: Ensuring Ethical and Efficient AI Systems

As artificial intelligence (AI) systems increasingly permeate every aspect of business, from online advertising to automated customer…
Responsible AI Governance and Policy: Guiding Principles

Responsible AI Governance and Policy: Guiding Principles

In the fast-paced world of business, innovation often takes center stage. But as we harness the power…
AI Regulation in Finance: Governance and Consumer Protection

AI Regulation in Finance: Governance and Consumer Protection

The financial industry is experiencing a gold rush of sorts with the integration of Artificial Intelligence (AI)…
Explainer: The CDK Global Ransomware Attack

Explainer: The CDK Global Ransomware Attack

CDK Global, a leading software vendor, provides critical applications and services to nearly 15,000 automotive dealer locations…
What is AI TRiSM? And Why Is It Important?

What is AI TRiSM? And Why Is It Important?

According to Gartner, who coined the term, AI TRiSM (AI Trust, Risk and Security Management) ensures an…
How to Develop a Statement of Applicability: Step-by-Step Guide

How to Develop a Statement of Applicability: Step-by-Step Guide

The ISO Statement of Applicability (SoA) is central to achieving ISO certification. This document becomes the point…
โ€‹โ€‹Micro-Managed: AMD Investigates IntelBroker Hackย 

โ€‹โ€‹Micro-Managed: AMD Investigates IntelBroker Hackย 

AMD is investigating a potential data breach after a notorious hacker, known as IntelBroker, announced they were…
Skip to content