news analysisNo consensus on creating a unified US cyber incident reporting frameworkComments submitted to CISA regarding its creation of cyber incident and ransom payment reporting requirements underscore how tough it will be for the agency to create a one-size-fits-all framework.By Cynthia Brumfield29 Jun 202310 minsRegulationRansomwareCompliance news Meta fined $1.3B for violating EU GDPR data transfer rules on privacyBy Charlotte Trueman22 May 20234 minsRegulationGDPRData Privacynews Vanta adds new SaaS capability to address growing concerns over vendor securityBy Shweta Sharma03 May 20233 minsVendor ManagementVendor ManagementVendor Management news analysisBattle could be brewing over new FCC data breach reporting rulesBy Cynthia Brumfield 11 Apr 20238 minsRegulationData BreachCompliance newsObsidian launches new SaaS security and compliance toolsBy Shweta Sharma 05 Apr 20234 minsComplianceRisk ManagementSaaS newsUK fines TikTok $15.8 million for GDPR violation of children's privacyBy Jon Gold 04 Apr 20233 minsRegulationData PrivacyCompliance opinionSoftware liability reform is liable to push us off a cliffBy Andy Ellis 02 Mar 20236 minsApplication SecurityComplianceOpen Source newsAt least one open source vulnerability found in 84% of code bases: ReportBy Apurva Venkat 23 Feb 20234 minsComplianceOpen SourceVulnerabilities newsDNA Diagnostic Center fined $400,000 for 2021 data breachBy Apurva Venkat 21 Feb 20234 minsData BreachCompliance ArticlesfeatureHow Microsoft Purview can help with ransomware regulatory complianceMicrosoft's renamed compliance portal provides guidance and rule-setting capability to help comply with ransomware and other security and privacy requirements.By Susan Bradley 22 Jun 2022 5 minsRansomwareCompliancefeatureSecurity and privacy laws, regulations, and compliance: The complete guideThis handy directory provides summaries and links to the full text of each security or privacy law and regulation.By CSO Staff 25 May 2022 39 minsRegulationComplianceSecuritynewsLightBeam launches data privacy automation platform to streamline complianceNew identity-centric platform designed to help businesses automate compliance against a patchwork of existing and emerging privacy regulations such as GDPR, CPRA, HIPAA and PCI DSS.By Michael Hill 06 Apr 2022 2 minsData PrivacyCompliancenewsMeta fined EUR17 million by Irish regulator for GDPR violationsIn the wake of 12 data breaches reported in 2018, Facebook’s parent company hit with hefty fine for failing to follow GDPR regulations related to its ability to demonstrate data privacy protection practices. By Jon Gold 16 Mar 2022 3 minsGDPRData PrivacyCompliancenewsSEC plans four-day cybersecurity breach notification requirementThe US stock market regulator wants to tighten reporting requirements for security breaches at publicly traded firms.By Jon Gold 10 Mar 2022 2 minsData BreachComplianceSecurityfeatureData residency laws pushing companies toward residency as a serviceMany countries now require companies that operate within its boundaries to store data on their residents locally. Using residency-as-a-service providers is becoming an important option. By Maria Korolov 26 Jan 2022 10 minsRegulationData PrivacyCompliancefeatureUsing the NIST Cybersecurity Framework to address organizational riskNIST's CSF, used with other guidance, can help map risk to actual threats and better comply with security mandates such as the U.S.'s cybersecurity executive order.By Chris Hughes 25 Jan 2022 6 minsComplianceRisk ManagementfeatureWhat is PII? Examples, laws, and standardsBy Josh Fruhlinger 10 Jan 2022 9 minsRegulationRegulationRegulationnews analysisUK NCSC updates Cyber Essentials technical controls requirements and pricing structureTechnical controls update includes revisions surrounding the use of cloud services, multi-factor authentication, and password management. New pricing structure better reflects organisational size and complexity.By Michael Hill 07 Jan 2022 3 minsRegulationCompliancefeatureTop 8 cybersecurity predictions for 2022Seeing opportunities in the mass move to remote work, cyberattackers are updating their tactics, compelling security leaders to respond. Experts make their predictions about threat reduction, compliance, supply chain management, security spending and more.By Shweta Sharma 06 Jan 2022 6 minsMalwareThreat and Vulnerability ManagementCompliancefeature18 cybersecurity startups to watchSecurity startups are often innovation leaders that attempt to solve critical and persistent problems. These are some of the most interesting ones to watch as they tackle issues around multicloud security, identity management, zero-trust, and more. By CSO Staff 24 Dec 2021 8 minsZero TrustDevSecOpsComplianceopinionChina’s Personal Information Protection Law (PIPL) presents challenges for CISOsPIPL's data localization mandate places unique requirements on businesses operating in China, and regulators have great leeway to assess fines. By Christopher Burgess 02 Dec 2021 4 minsRegulationData PrivacyCompliance Show more Show less View all Resources whitepaper Breakthrough with Modern Security: How CIOs Can Enhance Cyber Resilience The recent rapid acceleration of digital transformation and distributed work has changed the game in cybersecurity. When most employees worked exclusively from an office, the boundaries for cybersecurity were clearer. The post Breakthrough with Modern Security: How CIOs Can Enhance Cyber Resilience appeared first on Whitepaper Repository. By Dell Technologies 18 May 2023Cloud SecurityCybercrimeSecurity whitepaper Data Protection in a Multicloud World By Dell Technologies 18 May 2023Cloud SecurityData and Information SecurityMulti Cloud whitepaper Top reasons why customers choose Dell VxRail By Dell Technologies 18 May 2023Infrastructure ManagementIT ManagementSystem Management View all Video on demand videoAligning security, compliance and privacy across inventory trackingBrad Wells, Executive Director, Information Security, and Kandice Samuelson, Senior Director, IT Governance at PPD lead a team enhancing PPD’s inventory tracking system that identifies PPD's most valuable assets. Join us to learn how they distribute security resources for appropriate levels of protection, maintain compliance with government regulations and industry standards, and leverage information security controls aligned with client requirements, industry frameworks and privacy regulations. May 28, 2021 20 minsComplianceData and Information SecurityPrivacy See all videos Explore a topic Application Security Business Continuity Business Operations Careers Cloud Security Critical Infrastructure Cybercrime Identity and Access Management Industry IT Leadership Network Security Physical Security Privacy Risk Management Security View all topics All topics Close Application Security Business Continuity Business Operations Careers Cloud Security Critical Infrastructure Cybercrime Identity and Access Management Industry IT Leadership Network Security Physical Security Privacy Risk Management Security Security Infrastructure Software Development Vulnerabilities Generative AI Show me morePopularArticles opinion What is the dark web? How to access it and what you'll find By Darren Guccione 01 Jul 202111 mins Data BreachTechnology IndustryCybercrime