Blog

You might think you have vendor management and business continuity figured out, but don’t be so sure. The FDIC’s FIL-19-2019 highlights observations from recent examinations revealing that financial institutions may be unaware of the gaps that often exist between a technology service provider's cont...

Read More...

Date: Wednesday, April 24, 2019 Time: 2:00-3:00 PM CDT Complimentary webinar series.  Time not work for you? That's ok! All registrants will receive a recording of the webinar. Description: Cybercriminals and software companies are in a race to the finish li...

Read More...

Date: Wednesday, April 17, 2019 Time: 2:00-3:00 PM CDT Complimentary webinar series.  Time not work for you? That's ok! All registrants will receive a recording of the webinar. Description: You asked for it.  You got it!  Join us as we host a second session on SOC 2 r...

Read More...

There are a variety of different types of SOC reports, including SOC 1, SOC 2, and SOC 3, as well as the newest member of the team – the SOC for Cybersecurity. While each report has its own purpose, we’re going to dive into the difference between the SOC 2 and SOC for Cybersecurity reports.

Read More...

Join us to review the proposed changes to the safeguard controls, scope of covered entities, how you can make comments on the proposed changes, and insight into the impacts on our banks, critical vendors, and business in our communities.

Read More...

The first major changes to the GLBA and the Safeguards Rule have been proposed. On March 5th, 2019, the FTC announced proposed revisions to the Safeguards Rule, including an expansion of the companies covered by the Rule and requiring specific controls to secure customers’ information.

Read More...

"Scoping your IT Audit based on risk" is a phrase that’s thrown around a lot by IT Audit companies and examiners, but what does it really mean? How do you know if your IT Audit is truly risk-based, or if it’s based on an auditor’s idea of what security ought to be?

Read More...

Social engineering testing more than once a year is proven to be a beneficial way to keep employees alert and hold them responsible for their actions. Since hiring regular testing throughout the year is not an option for everyone, let’s go through some options for performing your own internal social...

Read More...

Join us as we discuss the struggles that organizations have when dealing with SOC 2 reporting.

Read More...

As important and measurable as the IT Risk Assessment can be, it is only part of the equation when it comes to assessing risk at your organization.

Read More...