Compliance

Compliance news, analysis, research, how-to, opinion, and video.

Unicorn GDPR IDC
football offense defense

4 compliance

What is GRC and why do you need it?

GRC is a strategy for managing an organization's overall governance, enterprise risk management and compliance with regulations Learn how GRC can help you align IT activities to business goals, manage risk effectively and stay on top...

artificial intelligence brain circuitry circuits electronics

The hidden risk of blind trust in AI’s ‘black box’

Companies intent on weaving AI more tightly into the fabric of their businesses are seeking to better explain how algorithms make their decisions, especially where risk and regulations are involved.

audit searching

10 ways you’re failing at IT audits

IT audits can feel like a grim nuisance, but great value awaits those who heed these common mistakes that inevitably lead to an IT audit disaster.

grc certifications

The top 6 governance, risk and compliance (GRC) certifications

Job roles from IT auditor to security engineer to CIO require or benefit from a GRC certification. Here are six top-rated governance, risk and compliance certifications that are worth the time, cost and effort.

The top 6 Governance, Risk and Compliance certifications

CEOs are always on the lookout for dependable folks who can identify potential exposures and quantify the impacts of risk on an organization while protecting the interests of employees, shareholders, other organizations and the...

Cloud can ease burden of data protection compliance, Google execs say

The EU's General Data Protection Regulation (GDPR) is fast approaching but with significant resource investment required, many organisations are struggling to meet the May 2018 deadline.

owasp

Latest OWASP Top 10 looks at APIs, web apps

The new release of the OWASP Top 10 list is out from the Open Web Application Security Project, and while most of it remains the same there are a couple of new additions, focusing on protections for web applications and APIs

gears 142263619

How RegTech closes the gap between technology and financial services

Customers, entrepreneurs, banks and financial institutions in general have all felt the sudden impact of FinTech over the last few years. In fact, banks are expected to invest more than $20 billion on technologies in 2017, and the...

tablet with skull and crossbones cybersecurity

County and municipal cybersecurity, Part 2

This is Part 2 of a two-part series for municipal executives and managers on cybersecurity. Included is a discussion of information governance (IG) and a look at frameworks, standards and regulations, including NIST, HIPAA, ISO27000...

statue of liberty

Expert: NY breach report highlights third-party risk

New York reported a record high number of breaches last year, just after a new set of cybersecurity regulations went into effect in the state.

cybersecurity

County and municipal cybersecurity, Part 1

This is the first part of a two-part series on cybersecurity for county and municipal organizations. In Part 1, I define major issues and obstacles specific to municipal government. In Part 2, I will offer solutions. This article was...

ibm watson health

Texas hospital struggles to make IBM's Watson cure cancer

If IBM is looking for a new application for its Watson machine learning tools, it might consider putting health care providers' procurement and systems integration woes ahead of curing cancer.

live streaming problems primary2

How livestreaming video threatens the enterprise

The rise of livestreaming is driving more collaborative workplaces, but it can also expose your business to risk. Just ask the Pittsburgh Steelers.

hipaa compliance intro

6 things software vendors need to know about HIPAA compliance

Dizzion provides suggestions for ways vendors can maintain HIPAA compliance while still focusing on their primary business objectives.

student books with apple for teacher

Compliance focus, too much security expertise hurts awareness programs

Security awareness teams aren't getting the support they need to be successful, according to the SANS Institute. But some unexpected factors can cause programs to fail as well, including a focus on compliance -- and too much security...

europe data privacy rules primary2

U.S. companies spending millions to satisfy Europe's GDPR

PwC says CIOs are allocating millions of dollars from their budgets to accommodate the Europe’s General Data Protection Regulation, which will require U.S. companies to meet stringent data privacy rules in 2018.

mobile device management

Top EMM stories of 2016

With a growing number of mobile devices entering the workplace, IT is focused on implementing easy, scalable solutions for enterprise mobile management. Here are 10 stories that look at the growing trend of EMM.

blame 174280704

Who's responsible for data compliance? 25% of executives don't know

A new survey sheds some light on just how little grasp U.S. organizations have on privacy and security regulations.

Load More