Truvantis Blog | John MacInnis (5)

CPPA Reduces the CPRA Implementation Window for New Privacy Laws

During a public board meeting on February 17, 2022, the California Privacy Protection Agency (CPPA) indicated it would likely miss the July 1, 2022 deadline for the finalized draft of the CPRA. The delay is due to more time and resources required to receive and process public

PCI DSS, SOC2, CISO, vCISO, CIS Controls, Security Program

Four Compliance Standards that can Accelerate Your Sales Team

Businesses must comply with a mixture of international, industry-specific and state-mandated cybersecurity regulations and require their vendors to do so. For this reason, compliance with specific cybersecurity standards becomes another way to

Penetration Testing, Security Program

Pen Testing the Cloud and Hybrid Environments

Cloud technologies enable companies to build and run scalable applications in dynamic public, private, and hybrid environments. Containers, service meshes, microservices, immutable infrastructure, and declarative APIs exemplify the elastic cloud

Penetration Testing, Security Program, Red Teaming

The Hackers Guide to API Penetration Testing

Pen testing has traditionally focused on realistic simulated attacks on your network, operating systems and applications. In today's interconnected world, application programming interfaces (APIs) have rapidly become predominant tools for providing

PCI DSS

PCI DSS Truncation Rules and Guidelines

The PCI Security Standards Council's redefined truncation rules are a mess.

PCI DSS

Five Ways to Reduce the Cost of PCI DSS Compliance

If your company stores, processes, or transmits cardholder data, you need PCI DSS compliance. According to the Verizon 2020 Payment Security Report, within the financial and insurance industries, 30% of breaches were caused by web application

Penetration Testing, Security Program, Red Teaming

Vulnerability Assessment, Penetration Testing, and Red Team Conflation

Red Team vs. Penetration Test vs. Vulnerability Assessment - Seven characteristics that set these services apart and why it matters to you.

CISO, vCISO, Security Program

Overseeing a vCISO - Translating Information Security to Business Risk

Most experts agree that the Chief Information Security Officer (CISO) role is a business necessity in today's cyber - risky environment . According to a Deloitte 2021 survey, companies listed security, privacy, demonstrating compliance, and

Security Program, Privacy

The Seven Regions of Cyber-Governance

Privacy, cybersecurity, and Compliance are distinct practices with distinct goals. The three disciplines work together to build trust and confidence in your data management system in best-case scenarios.

SOC2, Security Program

Three Indicators Your Startup should be SOC 2 Compliant

A System and Organization Controls 2 (SOC 2) compliant report is an industry-recognized standard for demonstrating the efficacy of information systems. It is one of the most requested credentials by prospective clients when screening IT services

Previous Next

Blog

Subscribe For Updates

Recent Posts

Related Articles By Topic

Related Articles By Topic

CPPA Reduces the CPRA Implementation Window for New Privacy Laws

Four Compliance Standards that can Accelerate Your Sales Team

Pen Testing the Cloud and Hybrid Environments

The Hackers Guide to API Penetration Testing

PCI DSS Truncation Rules and Guidelines

Five Ways to Reduce the Cost of PCI DSS Compliance

Vulnerability Assessment, Penetration Testing, and Red Team Conflation

Overseeing a vCISO - Translating Information Security to Business Risk

The Seven Regions of Cyber-Governance

Three Indicators Your Startup should be SOC 2 Compliant

John MacInnis

Recent Posts

1 CPPA Reduces the CPRA Implementation Window for New Privacy Laws

2 Four Compliance Standards that can Accelerate Your Sales Team

3 Pen Testing the Cloud and Hybrid Environments

4 The Hackers Guide to API Penetration Testing

5 PCI DSS Truncation Rules and Guidelines

6 Five Ways to Reduce the Cost of PCI DSS Compliance

7 Vulnerability Assessment, Penetration Testing, and Red Team Conflation

8 Overseeing a vCISO - Translating Information Security to Business Risk

9 The Seven Regions of Cyber-Governance

10 Three Indicators Your Startup should be SOC 2 Compliant