The implementation of CPRA and introduction of civil penalties for theft of login information should encourage businesses to establish a strong data security posture management (DSPM) strategy. This is a key first step to protect and monitor personal information more effectively and allow consumers to control data sharing.
With the significant increase in the number of cyberattacks, focus of employees returning to the office should not only be on healthcare-related practices but must also address hardware security risks.
Recent events like the SolarWinds breach are stark reminders that to safely migrate operations to the cloud, organizations need to have a thorough plan ahead of time that is centrally focused on governance and security.
The only guarantee today is that nefarious parties will continue to find new ways to infiltrate networks at financial institutions. Therefore, we must implement best practices to protect against cybersecurity incidents, as well as to resolve all possible issues that can arise should a cyberattack occur.
If your business is dealing with data then ignoring the peace of mind that cyber liability insurance would provide would be foolhardy. In fact, the very survival of a business that stores and leverages customer data in any way may very well depend on good cyber liability coverage.
Hundreds of written comments received by the California Office of the Attorney General show that there is still confusion and possible expansion of the CCPA.
The emergence of PrivacyTech has since provided and will continue to expand on solutions to help companies with privacy protection and personal data management.
The COVID pandemic and The Great Resignation have led to extensive upheaval in workforces and workplaces. How best to achieve and maintain continuous SOC 2 compliance in the face of these seismic shifts?
No matter how boring or clichéd this might sound, information security policies and procedures are the pillars successful organizations are built on, setting the stage for a sound security culture and helping to create a foundation for a truly resilient organization.
While the legitimate interests ground for processing under the GDPR can be lawfully applied in many cases, a provisional balance should be established by data controllers with more safeguards for the protection of data subjects.










