HITRUST, in collaboration with healthcare, business, technology and information security leaders, has established the Common Security Framework (CSF), a certifiable framework that can be used by any ...

In the hectic, sometimes crazed world of healthcare cybersecurity, a little guidance can be a welcome thing for CIOs and CISOs. That’s why the Center for Internet Security pieced together its CIS ...

FRISCO, Texas--(BUSINESS WIRE)--HITRUST®, a leading data protection standards development and certification organization, today announced a new initiative to incentivize information security teams ...

Multiple frameworks now define cybersecurity requirements for broadcast and media companies. The landscape has expanded ...

The Center for Internet Security released version 6.0 of their ubiquitous Critical Security Controls framework Thursday, giving enterprises another reference on how to properly stand up a ...

Does your organization need NIST, CSC, ISO, or FAIR frameworks? Here's how to start making sense of security frameworks. Cybersecurity professionals often face the curse of knowledge–understanding so ...

We have entered the era of multiple security frameworks. Sometimes mandatory, often voluntary, security frameworks are created to provide federal and commercial organizations with an effective roadmap ...

NEW YORK – May 6, 2020 –– The Information Security Forum (ISF) has published a major update to its Standard of Good Practice (The Standard) for IT security professionals, the industry’s most ...

The CSA’s SSCF benchmark aims to help SaaS vendors build zero trust principles into their environments and give customers more consistent security controls as third-party risk rises. Independent ...

Here is how BHEL put in place a comprehensive information security management framework to safeguard its information assets while improving operational efficiency. With over five decades of ...

Under federal, state, regulatory, and contractual requirements, Michigan Tech is responsible for developing and implementing a comprehensive information security program. The purpose of this document ...