Governance, Risk & Compliance

Navigating the world of SOC 2 compliance can seem daunting for startups. This article breaks down the complexities, explaining what SOC 2 is, why it's important, and how your startup can achieve ...

Why GRC strategies are often not as effective as they could be, and specific practices businesses can adopt to improve GRC operations ...

Xi whiz: Versa Networks criticized for swerving the blame ...

Cybersecurity certifications continue to open doors and shape careers in security operations (SecOps). However, the mileage that individuals and organizations get out of certs can vary by industry, the specific demands of ...

Somebody asked me this profound question that (a) I feel needs an answer and that (b) I’ve never answered in the past:If you run a SOC (or an equivalent D&R team), what things ...

Should’ve listened to Edison: After the arrest of Pavel Durov—the Telegram CEO—comes news of domestic extremists using the chat app to organize ...

The Securities and Exchange Board of India (SEBI) has issued a notification regarding the Cybersecurity and Cyber Resilience Framework for Market Infrastructure Institutions (MIIs). This framework mandates MIIs to establish robust cybersecurity ...

Oink, oink, FAIL—you’re in jail: Kansas bank chief exec Shan Hanes stole money from investors, a church and others to buy cryptocurrency to feed a scam ...

ISO 27018 is an international standard for the protection of Personally Identifiable Information in cloud computing environments. However, unlike the broad scope of the ISO/IEC 27001 standard, it goes further to provide ...

Something has been missing in the governance, risk, and compliance (GRC) space: the ability to truly understand an organization’s GRC maturity and the steps it would take to build the business case ...