Secure Controls Framework (SCF)
May 30, 2022
Centraleyes Resource Center
- Yair Solow Featured on Bugy's Founder Interviews
- Centraleyes Chosen as Global Top 5 Startups of the Year - Interview
- Centraleyes on Cyber Ghost: Interview with Yair Solow
- Spotlight Q&A with Centraleyes at Safety Detectives
- Centraleyes Expands Automated Risk Register To Cover All Enterprise Risk
- New Centraleyes 4th Generation Release Officially Goes Live
- Yair Solow Featured on VPN Mentor
- Yair Solow on CNN
- CyGov Signs a Strategic Agreement with R3 (Spanish)
- Centraleyes Welcomes Co-Founder of Optiv, Dan Burns, to Its Board of Directors
- Centraleyes Continues to Expand Its Global Network of Strategic Partners with UK-based ITC Secure
- Centraleyes Introduces First Automated Risk Register
- Yair Solow Featured on Website Planet
- Trevor Failor named head of sales at CyGov
- CyGov is rebranding its platform as Centraleyes
- Cybersecurity Company Cygov Partners With Risk Management Company Foresight
- CyGov agrees strategic partnership with top 200 MSSP Cybriant
- Cyber Resilience Resource for Businesses Re-Deploying Remotely
- The Four New Pillars of Corporate Protection Yair Solow on InfoSecurity Magazine
- CyGov selected by SixThirty as Top Cyber Security Startup
- Europe's Top Cyber Security Startups
- CyGov Interviewed by MediaSet
- Eli Ben Meir's article in Security Intelligence
- Yair Solow on i24 News
- CyGov Selected by WorldBank
- Eli Ben Meir OpEd in the Houston Chronicle
- Yair Solow and Eli Ben Meir Present at the SparkLabs Demoday 8
- Enhance Your Cyber Maturity With ITSM Integration and Automated Remediation
- Ensure Your Ongoing Compliance With Automatic Framework Reassessment Tasks
- Stay in the Know With a Full Activity Log of Your Assessment Collection
- Add a New Entity to Perform Your Assessment in 10 Seconds
- Quantify Financial Risk With Centraleyes Platform Primary Loss Calculator
- Cover Your Entire Environment With Centraleyes's Risk Application Assessments
- Communicate Cyber Risk With Your Executives in an Intuitive, Beautifully Visualized Board Reporting
- Stay on Top of Your Vendors' Cyber History With In-Depth External Scans
- Automate the Creation and Maintenance of a Risk Register, Saving Hours on Manual Work
- Add a New Framework and Distribute Assessments in Your Organization
- View Your Organization's Risk Scoring Through the NIST Tiering Lens
- Most Intuitive Way for Compliance With the Framework Navigation Tool
- Always Prepared for the Next Task With Automated Remediation
- Effective Team Work With Drag-and-Drop Control Assignment
- Get Real-Time Critical Alerts That are Specifically Relevant to You
- MSSPs Can Manage Multiple Clients Under One Platform
- Onboard a New Vendor in Just 30 Seconds
- Turn Hours of Work Into Seconds with Centraleyes Vendor Risk Profile
- Always Informed with Centraleyes Domain Benchmarking
- Is Temu the Next TikTok? House Republicans Sound the Alarm on Data Security
- Hackers Target Cybersecurity Job Seekers
- UK Data Centres Crowned Critical National Infrastructure
- White House and CISA Double Down on Securing Open Source Software: A New Era of Vigilance
- Massive Data Breach Exposes Personal Information of Billions
- Whistle While You Work
- Delta’s Mirror Moment: A Play of Third-Party Reflection
- The Great Cyber Debate: Regulation vs. Innovation
- CrowdStrike Outage
- How is "Materiality" Defined According to the SEC Disclosure Rules?
- Balancing Act: Streamlining Federal Cybersecurity Regulations
- Auto Sales Hit a Cyber Speedbump
- Explainer: The CDK Global Ransomware Attack
- Micro-Managed: AMD Investigates IntelBroker Hack
- Microsoft Puts Recall on Hold
- Snowflake Breach Snowballs
- Game Over? Law Enforcement Plays Hardball in Operation Endgame
- Cybersecurity in Sports: A New Arena for Risk Management
- Boeing's Sky-High Ransomware Refusal
- What was Behind the Change Healthcare Breach that Shook the Healthcare Industry?
- Cisco Raises Concerns Over Surge in Brute-Force Attacks Targeting VPN and Web Services
- Bipartisan Proposal Sparks Hope for American Privacy Rights Act
- Microsoft Responsible for Made-in-China Hack that Targeted US Officials
- AI Gets an Endorsement from Coalition
- NIST NVD "Under Construction"
- TutaCrypt to Thwart 'Harvest Now, Decrypt Later' Attacks
- 9.8/10 Severity Flaw in Team City- Patch Now!
- Blackcat Claims Responsibility for the UnitedHealth Change Breach
- US Gov's Cyber Survival Guide for Water Utilities
- Safeguarding Elections Amidst the Deepfake Deluge
- Faking the Figures (and the Faces): Deepfake Financial Frauds
- Trello Got a Scrape
- Advisory Issued for Androxgh0st Malware
- X Marks the Spot: Mandiant and SEC's Security Sway on Twitter
- Quantum Quandary: Navigating the Path to Unbreakable Encryption
- Chameleon Android Banking Trojan Morphs with Advanced Tactics, Expands Targets
- Ubiquiti Resolves User Access Bug
- The U.S. Needs a Better AI Plan
- Navigating the Cyber Currents: Ensuring a Watertight Critical Infrastructure
- Dollar Tree Breach: Supplier Roots Sprout Risks
- How to Build a Successful GRC Program to Help Reduce Your Risk Posture
- How to Stay Secure and Compliant in a World of Regulatory turmoil
- Don’t Keep Your Head in the Clouds – How to Protect Yourself from Virtual Risk
- Flash Webinar: How to Know When it's Time to Build a Risk Management Program
- Enhancing Cyber Risk Management Through the Power of Automation - Boutique Webinar
- Flash Webinar: From Technical to Business Risk - How to Communicate With Your Board
- Flash Webinar: What You Can Learn From the SolarWinds Attack to Lower Your Chances of Being Breached
- Flash Webinar: Supply Chain, 3rd-Party Vendors and the Silent Assassin Among Them
- Flash Webinar: Cyber Risk Management - it Doesn't Have to Be So Painful
- How to Automate GDPR Compliance
- 8 Best Cyber Risk Mitigation Tools You Should Know
- 2024's Best Open Source Cybersecurity Tools
- Understanding Corporate Compliance Programs and Their Importance for Every Organization
- Importance of AI Governance Standards for GRC
- Comparing Compliance Management Software: Key Features and How They Stack Up
- An Introduction to the Hawaii Consumer Privacy Protection Act
- FAIR Model Risk Management - Pros and Cons
- Mastering the Art of GRC Reporting: Essential Tips fo Engaging the Board
- Best 10 Regulatory Change Management Software of 2024
- Harnessing the Power of GRC Software for Enhanced Business Resilience and Compliance
- FFIEC Will Sunset the Cybersecurity Assessment Tool: Everything You Need to be Prepared
- FIPPA: Understanding Canada's Information and Protection Privacy Law
- Understanding British Columbia's Personal Information Protection Act (PIPA)
- 10 Best ERM Software in 2024: The Complete Guide
- New Jersey Privacy Act 2024: What to Expect
- Risk Register Templates: Enhancing Your Risk Management Strategy
- Colorado New AI Act: Everything you Need to Know
- Updating Security Metrics For NIST CSF 2.0: A Guide To Transitioning From 1.0 To 2.0
- When Compliance Fails: Eye-Opening Incidents in GRC You Need to Know
- CJIS Compliance Checklist: Are You Meeting All the Requirements?
- Substantive Testing vs. Control Testing: Unveiling the Difference
- DORA's Third-Party Risk Standards in 2024: A Comprehensive Guide
- The Key Components of HRIPA Compliance
- 7 Methods for Calculating Cybersecurity Risk Scores: A Guide to Risk Analysis
- 7 Best Cyber Risk Management Platforms of 2024
- The Top 7 AI Compliance Tools of 2024
- Best 5 SOC 2 Compliance Software in 2024
- ISO/IEC 42001: What You Need to Know
- 10 Best Integrated Risk Management Solutions
- Best 8 Vulnerability Management Tools for 2024
- How to Select a Qualified SOC 2 Auditor
- Maximizing Cloud Data Security: Importance, Challenges and Best Practices
- Best Strategies to Reduce Generative AI Risk
- The Best 10 Vendor Risk Management Tools
- Comprehensive Guide to AI Risk Assessment and Regulatory Compliance
- The American Privacy Rights Act: What You Need to Know
- Top Cybersecurity Websites and Blogs for Compliance in 2024
- What is the Massachusetts Data Privacy Law (MIPSA)?
- AI Auditing: Ensuring Ethical and Efficient AI Systems
- Cyber Leaders of the World: Chris Lockery, CISO at Help at Home
- Cyber Leaders of the World: Michael Anderson, CISO at the Dallas Independent School District
- Cyber Leaders of the World: Timothy Spear, Co-Founder and CTO of Whonome
- Cyber Leaders of the World: Marc Johnson, CISO at Impact Advisors
- Cyber Leaders of the World: Craig Williams, CISO at Secure Data Technologies
- Cyber Leaders of the World: Bill Genovese, CIO Advisory Partner at Kyndryl
- Cyber Leaders of the World: Dr. Brian Callahan, Graduate Program Director & Lecturer at ITWS@RPI, and CISO at PECE
- Cyber Leaders of the World: Chris Grundemann, Research Category Lead for Security and Risk at GigaOm
- Cyber Leaders of the World: Barak Blima, CISO at CHEQ
- Cyber Leaders of the World: Tony Velleca, CEO at CyberProof and CISO at UST
- Cyber Leaders of the World: Rob Black, CEO and Founder of Fractional CISO
- Cyber Leaders of the World: Zachary Lewis, CISO at the University of Health Sciences and Pharmacy in St. Louis
- Cyber Leaders of the World: Dan Wilkins, CISO at the State of Arizona
- Cyber Leaders of the World: Sagar Narasimha, CISO at Amagi
- Cyber Leaders of the World: Seema Sharma, Global Head of Information Security & Data Privacy at Servify
- Cyber Leaders of the World: Shay Siksik, VP of Customer Experience at XM Cyber
- Cyber Leaders of the World: Raz Karmi, CISO at SimilarWeb
- Discretionary Access Control (DAC)
- Covered Defense Information (CDI)
- AI Secure Development
- Approved Scanning Vendor (ASV)
- Law Enforcement Sensitive (LES)
- Content Delivery & Security Association
- Report on Compliance (ROC)
- OT Cyber Risk Framework
- Unified Privacy Framework
- Data Subprocessor
- Threat-Based Risk Assessment
- Semi-Quantitative Risk Assessment
- Vulnerability-Based Risk Assessment
- Risk Management Strategy
- Authorization to Operate (ATO)
- StateRAMP
- Segregation of Duties
- PCI Penetration Testing
- Due Diligence Questionnaire
- Key Risk Indicator
- AI Policy
- TISAX
- COPPA
- AI Risk Management
- AI Auditing
- Data Exfiltration
- Data Sovereignty
- Control Objectives for Information and Related Technologies (COBIT)
- Audit Management Software
- Vendor Framework
- AI Governance
- AI Transparency
- Internal Penetration Testing
- Cybersecurity Automation
- GDPR Compliance Risk Assessment
- Audit Fatigue
- Compliance Operations
- Risk Management Automation
- Corporate Sustainability Reporting Directive
- Man-in-the-Middle Attack
- What are the different types of compliance management tools?
- How long does SOC 2 compliance take?
- What are the Differences Between Internal and External Penetration Testing?
- What is the difference between proactive and reactive risk management?
- Why is a data retention policy important?
- What is the operational risk management process?
- How to implement the COSO framework?
- How do you perform a cyber security risk assessment?
- How to develop an enterprise risk management framework?
- How do you respond to a security questionnaire?
- What are the main steps in the threat modeling process?
- What exactly is considered PHI according to HIPAA?
- What does the PCI Compliance Auditor Look At?
- How to Detect and Prevent Data Leakage?
- What are the Challenges Associated with Cloud Security Management?
- How Many Techniques Are There in MITRE Att&ck?
- What Are the Benefits of Conducting a Risk Assessment?
- What are the categories of controls in ISO 27001?
- How Does ABAC Differ From Other Access Control Models?
- What Does a Compliance Management System Look Like?
- What Are the NIST CSF Implementation Tiers?
- What is the Purpose of Compliance Attestation?
- How do I become NIST 800-171 compliant?
- Why are the three rules of HIPAA necessary?
- What are the seven categories of risk?
- What are the Six Types of Vulnerability Scanning?
- Which are the most important compliance frameworks?
- How do you implement GRC automation?
- How Can I Measure the ROI of Implementing a Compliance Solution?
- How do you determine whether HIPAA violations need to be reported?
- What are the three major threats to cybersecurity today?
- How Do You Manage Compliance Risk?
- How Does a GRC platform handle data privacy and security?
- How Often Should Supplier Risk Assessments Be Conducted?
- How is a SOC 2 Report Structured?
- What Are the Major Risk Factors in Cyber Security?
- How Do You Read a Risk Matrix Table?
- What is the Risk Rating Matrix Used For?
- What are the Benefits of Risk Assessment Software?
- How does the CMMC differ from NIST?
- Last Resources
FFIEC
June 14, 2021
PCI DSS
June 14, 2021
GDPR
June 14, 2021
SOC 2 Type II
June 14, 2021
NY SHIELD Act
June 14, 2021
OWASP ASVS
June 14, 2021
ISO 27001
June 14, 2021
CIS Controls
June 14, 2021
ISO 27701
June 14, 2021
NIST CSF
May 18, 2021
How to Automate GDPR Compliance
October 10, 2024
8 Best Cyber Risk Mitigation Tools You Should Know
October 7, 2024
2024’s Best Open Source Cybersecurity Tools
October 3, 2024
Resources | News & Updates
Is Temu the Next TikTok? House Republicans Sound the Alarm on Data Security
In the wake of the TikTok controversy, another Chinese tech giant is under scrutiny—Temu. This online marketplace…
Hackers Target Cybersecurity Job Seekers
For over a year, North Korean state-sponsored hackers, specifically the Lazarus Group, have been targeting Python developers…
UK Data Centres Crowned Critical National Infrastructure
The UK government has elevated data centres to the status of “Critical National Infrastructure” (CNI), putting them…
White House and CISA Double Down on Securing Open Source Software: A New Era of Vigilance
In April, the tech world faced a concerning incident involving XZ Utils, a widely used open-source compression…
Massive Data Breach Exposes Personal Information of Billions
A data breach at National Public Data, a relatively obscure but widely connected company, has exposed 272…
Whistle While You Work
The DOJ rolled out its Corporate Whistleblower Awards Pilot Program this month. The initiative incentivizes whistleblowers who…
Delta’s Mirror Moment: A Play of Third-Party Reflection
Setting: Two friends, Delta Air and Crowd Strike, sit at a corner table, sipping their drinks and…
The Great Cyber Debate: Regulation vs. Innovation
As the 2024 presidential election draws near, the candidates’ positions on cybersecurity and tech regulation will likely…
CrowdStrike Outage
On July 19, 2024, CrowdStrike released an update intended to beef up security on Microsoft Windows systems.…
How is "Materiality" Defined According to the SEC Disclosure Rules?
Several auto dealers affected by the CDK breach have felt compelled to notify the SEC, indicating that…
Balancing Act: Streamlining Federal Cybersecurity Regulations
A new bipartisan bill, the Streamlining Federal Cybersecurity Regulations Act, introduced by Senators Gary Peters (D-Mich.) and…
Auto Sales Hit a Cyber Speedbump
A recent cyberattack has put a speed bump in the path of automakers like Ford and General…
Explainer: The CDK Global Ransomware Attack
CDK Global, a leading software vendor, provides critical applications and services to nearly 15,000 automotive dealer locations…
Micro-Managed: AMD Investigates IntelBroker Hack
AMD is investigating a potential data breach after a notorious hacker, known as IntelBroker, announced they were…
Microsoft Puts Recall on Hold
Microsoft has announced a delay in the rollout of its controversial AI-powered Recall feature for Copilot+ PCs.…
Snowflake Breach Snowballs
In a concerning turn of events, a breach in Snowflake’s cloud storage system has resulted in a…
Game Over? Law Enforcement Plays Hardball in Operation Endgame
In what Europol has labeled the most significant crackdown against botnets to date, Operation Endgame saw law…
Cybersecurity in Sports: A New Arena for Risk Management
In the high-stakes world of professional sports, the action isn’t just on the field. Behind the scenes,…
Boeing's Sky-High Ransomware Refusal
A grand jury indictment in New Jersey charged Russian national Dmitry Yuryevich Khoroshev with orchestrating a litany…
What was Behind the Change Healthcare Breach that Shook the Healthcare Industry?
In a gripping Senate Finance Committee hearing, Change Healthcare CEO Andrew Witty disclosed that data stolen in…
Cisco Raises Concerns Over Surge in Brute-Force Attacks Targeting VPN and Web Services
Cisco has sounded the alarm on a widespread increase in brute-force attacks targeting various devices, including Virtual…
Bipartisan Proposal Sparks Hope for American Privacy Rights Act
A federal privacy law all but stalled in congress since 2022. But this week saw a sudden…
Microsoft Responsible for Made-in-China Hack that Targeted US Officials
A US government-backed investigation has determined that a China-sourced hack last year that infiltrated Microsoft’s networks and,…
AI Gets an Endorsement from Coalition
Coalition, a leader in cyber insurance, has added a positive endorsement for artificial intelligence (AI) to its…
NIST NVD "Under Construction"
In recent weeks, NIST’s National Vulnerability Database (NVD) has been experiencing a slowdown. Since February 15, 2024,…
TutaCrypt to Thwart 'Harvest Now, Decrypt Later' Attacks
Tuta Mail introduced TutaCrypt, a protocol engineered to bring email encryption into the post-quantum era. Tuta Mail…
9.8/10 Severity Flaw in Team City- Patch Now!
Hackers have recently seized upon a critical-severity authentication bypass vulnerability, CVE-2024-27198, within TeamCity On-Premises. JetBrains has swiftly…
Blackcat Claims Responsibility for the UnitedHealth Change Breach
UnitedHealth’s subsidiary, Change Healthcare, found itself at the epicenter of a cyber storm when it fell victim…
US Gov's Cyber Survival Guide for Water Utilities
In a recent move to bolster the nation’s water utilities against cyber threats, the US government has…
Safeguarding Elections Amidst the Deepfake Deluge
As we gear up for the 2024 U.S. presidential election, deepfake technology looms large, presenting a formidable…
