Blog

You might think you have vendor management and business continuity figured out, but don’t be so sure. The FDIC’s FIL-19-2019 highlights observations from recent examinations revealing that financial institutions may be unaware of the gaps that often exist between a technology service provider's cont...

Read More...

Join SBS as we discuss the answers to your common vulnerability assessment questions and offer guidance on what you can do with your program.

Read More...

Recording available. In this session, we will explain the differences between ATM Jackpotting and ATM Unlimited Operation. We will also explore some of the guidance around ATMs, the latest ATM crime trends, new security controls to mitigate risk, and how you can integrate your ATMs into your Informa...

Read More...

You asked for it. You got it! Join us as we host a second session on SOC 2 reporting. We will take a deeper dive into the challenges of completing a SOC 2 review.

Read More...

There are a variety of different types of SOC reports, including SOC 1, SOC 2, and SOC 3, as well as the newest member of the team – the SOC for Cybersecurity. While each report has its own purpose, we’re going to dive into the difference between the SOC 2 and SOC for Cybersecurity reports.

Read More...

Recording available. This session will examine in more detail how the IT Audit Program integrates with the Information Security Program.

Read More...

The first major changes to the GLBA and the Safeguards Rule have been proposed. On March 5th, 2019, the FTC announced proposed revisions to the Safeguards Rule, including an expansion of the companies covered by the Rule and requiring specific controls to secure customers’ information.

Read More...

"Scoping your IT Audit based on risk" is a phrase that’s thrown around a lot by IT Audit companies and examiners, but what does it really mean? How do you know if your IT Audit is truly risk-based, or if it’s based on an auditor’s idea of what security ought to be?

Read More...

Social engineering testing more than once a year is proven to be a beneficial way to keep employees alert and hold them responsible for their actions. Since hiring regular testing throughout the year is not an option for everyone, let’s go through some options for performing your own internal social...

Read More...

Join us as we discuss the struggles that organizations have when dealing with SOC 2 reporting.

Read More...