FedRAMP Rev. 5 servers

FedRAMP Rev. 5 Released

June 21, 2023

The Federal Risk and Authorization Management Program (FedRAMP) helps government agencies protect federal information while utilizing the power of cloud…

Read More

An Early Look at CMMC 2.0

May 23, 2023

Update: This article has been updated to reflect the DoD’s publication of the draft CMMC Proposed Rule (CMMC 2.0). The…

Read More

Conducting a GLBA Risk Assessment

May 1, 2023

Under the latest version of the Gramm-Leach-Bliley Act (GBLA) Safeguards Rule, element two is the requirement to conduct a risk…

Read More
GLBA cybersecurity requirements

GLBA Cybersecurity Requirements: What Your Organization Needs to Do

April 25, 2023

On June 9, 2023, new Gramm-Leach-Bliley Act (GLBA) cybersecurity requirements that reflect updates to the Safeguards Rule component of the…

Read More

New Healthcare Cybersecurity Framework Implementation Guide Released

March 22, 2023

The Health Sector Coordinating Council (HSCC) Cybersecurity Working Group and the U.S. Department of Health and Human Services worked together…

Read More

Beyond Compliance: API Security Testing

March 14, 2023

According to an article written by Nordic APIs, an international community of API practitioners and enthusiasts, in 2020, 90% of…

Read More

Penetration Testing: Going Beyond Compliance Requirements 

February 17, 2023

Regulatory and compliance frameworks such as PCI DSS, FedRAMP, NIST, and HITRUST often require organizations to conduct penetration testing to…

Read More

Protecting Your Data When it’s in the Hands of a Third-party

February 6, 2023

Auto-maker Nissan sent out a breach notification letter to approximately 18,000 people, notifying them that personal information had been leaked…

Read More

Ohio Supreme Court Rules Insurance Provider Not Required to Cover Cyber-attack Costs

January 12, 2023

The seven justices of the Ohio Supreme Court unanimously ruled that an insurance company was not required to cover the…

Read More

Implementing Phishing-resistant MFA

November 30, 2022

Phishing attacks continue to make news around the country. Businesses of all sizes have fallen prey, suffering damaged reputations and…

Read More

Finding a credible expert with the appropriate background, expertise, and credentials can be difficult. CompliancePoint is here to help.