ISO 27001 is among the most well-known and commonly used cybersecurity standards in the world. Organizations who implement and certify an ISO-compliant information security management system (ISMS) demonstrate that they are maintaining an excellent level of cybersecurity. In this article, we are going to outline the ISO 27001 compliance requirements and discuss what organizations and [...]
Getting hit by a cyberattack is a nightmare scenario for any company. Businesses not only have to deal with lost productivity and the cost of IT repairs, but could also be on the hook for fines and legal damages if any sensitive data was exposed as a result of the breach. Given this incredibly [...]
Our lives are becoming more digitalized by the minute and the healthcare industry is no exception. But when we go to hospital or visit the doctor, we have to trust that both medical and IT staff are trained to handle our private health-related information with sufficient care – in other words, to protect it [...]
From high-performance mechanical parts to digital assistance and safety features, modern cars come equipped with an ever growing number of technological innovations. To help auto manufacturers protect design specifications and other sensitive information even as they work with third party suppliers, the Automotive Industry Action Group (AIAG) developed the Third-Party Information Security Requirements (TPISR): [...]
“Achieving SOX compliance truly is a walk in the park!” Said no one ever. Staying on top of all SOX requirements can be a daunting task: financial records, internal controls, yearly audits – if preparing for SOX compliance is a walk in the park, then that park is a gigantic maze infested with booby [...]
The Sarbanes-Oxley Act (SOX for short) is a US federal law that was enacted in 2002 to ensure the accuracy of financial reports from publicly traded companies. Congress passed the SOX Act in response to major accounting scandals that took place in the early 2000s, including Enron, WorldCom and Tyco International. These scandals led to [...]
In 2018, Barreiro Montijo Hospital in Portugal was ordered to pay a massive fine for violating the General Data Protection Regulation (GDPR). The local data protection authority CNPD set the fine for improper access management at 400,000 euros. An additional violation cost the hospital another 100,000 euros. Unauthorized Access to Personal Data [...]
