CompliancePoint:
Information Security

Compliance Primer: Cisco’s False Claims Act Settlement Demonstrates Why Compliance is Important to IT Vendors

Daniel Kiehl, Customer Engagement Information Security

Recently, Cisco struck a deal with private plaintiffs and various government enforcement bodies to pay $8.6M for falsely certifying to government customers that their software packages did not contain any security flaws when in fact Cisco was made aware of such flaws but chose not… Continue Reading

Why Vendor Due Diligence is Critical to Your Information Security

Daniel Kiehl, HIPAA Information Security

The Consequences of Choosing the Wrong Vendor To stand out in today’s hyper competitive environment, a company must set itself apart from its competition by providing the most value to its customers in the most efficient way possible. To do this, most, if not all,… Continue Reading

What Current GDPR Fines Mean for US Businesses

Greg Sparrow, GDPR

Clearly US businesses are not immune to privacy regulation in Europe. If there was any doubt, look to Google’s fine yesterday under the GDPR. The largest fine yet to be imposed is being levied against one of the most recognizable technology brands in the world…. Continue Reading

Google Fined €50 Million for GDPR Violations: What Does This Mean and What to Expect Next?

Matt Dumiak, GDPR

What Happened? France’s Supervisory Authority (CNIL) has fined Google $56.8 millions Euros for what the data protection watchdog believes is a violation by the multinational tech company on EU’s General Data Protection Regulation (GDPR). How did it start? After receiving complaints based on ‘forced consent’… Continue Reading

What do Canada’s New Data Breach Reporting Requirements mean for US-Based Businesses?

Matt Cagle, Information Security

On November 1st the data breach reporting requirements under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) went into effect. US companies should be aware of these requirements and evaluate their operations to determine the applicability as well as what adjustment may be required to… Continue Reading

ICO issues £500,000 fine against Facebook for Cambridge Analytica scandal

Mackenzie Frerich, GDPR

To give a little background, in March of this year, an exposé published in the Guardian and New York Times revealed that the personal data of 87 million Facebook users, 1 million of which were UK Facebook users, was harvested from their profiles through personality quizzes… Continue Reading

Social Engineering –  How to Protect Yourself and Your Company

Bruce Josephs, Information Security

Social Engineering is a low-tech method used for gaining access to resources whether they are physical, technical, monetary, or informational (e.g. trade secrets, confidential).   Phishing is one example of Social Engineering What is Social Engineering? Social Engineering is the art and science of getting people… Continue Reading

Risk Analysis vs Gap Analysis – Knowing the Difference is Important

Martha Raber, HIPAA HITRUST

As a Certified HITRUST Assessor and career healthcare compliance and security specialist, I was very pleased to see OCR’s April Cybersecurity newsletter highlighting the differentiation between a HIPAA RISK Analysis and a HIPAA GAP Analysis.  The confusion or lack of true understanding around the difference in these two… Continue Reading

GDPR – Idenfifying your risks

Michael Kramer, GDPR

As the GDPR enforcement date is upon us, many companies are shifting into panic mode trying to really understand not only what the GDPR means to their company operationally, but also where their true risk lies.  How do they evaluate that risk?  How do they… Continue Reading

GDPR & IKEA

Jordan Eisner, Customer Engagement GDPR

How does the GDPR compare to IKEA? Well they’re both European for starters, and while IKEA is #trendy, GDPR is #trending. With the work I’ve done with clients utilizing our consulting services for GDPR support (which is primarily serving as liaison between the client and… Continue Reading