Truvantis Blog | John MacInnis (6)

Three Ways to Improve Your Bottom Line Using a vCISO

In today's cyber-risky environment, most experts agree that the role of a Chief Information Security Officer (CISO) is a business necessity. According to a Deloitte 2021 survey, companies listed security, privacy, demonstrating compliance, and improving efficiency and

CISO, vCISO, Security Program

Cybersecurity – Responsibility vs. Accountability

Responsibility vs. Accountability for Oversight of Cybersecurity The need to manage cybersecurity and privacy risk is generally accepted. In many organizations, it may even be clear who is doing it. However, there is often a lack of clarity over the

SOC2, vCISO

The Meaning of SOC from the AICPA

What does SOC mean and why does it matter? How did a CPA organization come to audit information systems for cybersecurity and privacy controls? Spoiler alert. The acronym SOC currently means System and Organization Controls, but that wasn't always

HIPAA, Privacy, CCPA, GDPR

EU Privacy - New GDPR Data Transfer Tools

New EU data privacy laws impact companies in 2022. In June 2021, the European Commission adopted a new set of standard contractual clauses (SCCs) for the transfer of personal data outside of EU countries such as the United States. Businesses have

SOC2, Security Program

The Four Essential Elements of SOC 2 Type 2 Compliance

The Type 2 audit measures your organizations’ ability to maintain security, availability, processing integrity, privacy, and confidentiality operationally over time. A SOC 2 Type 2 investment helps build resiliency into your business. It

SOC2, CISO, vCISO, Security Program

vCISO - Stories from the Trenches

Disasters, heroics, funny stories, and impacts to business success Nate Hartman describes a six-month stint as an acting CISO or virtual CISO (vCISO) at a fast-paced Silicon Valley tech company.

SOC2, CISO, vCISO, Security Program

What are the SOC 2 Trust Services Criteria?

The SOC 2 Trust Services Criteria (TSCs) for information technology, is a framework for designing, implementing and evaluating information system controls. The purpose of controls is to ensure your information system can meet its objectives. The

Security Program, Privacy

Apache Log4j Vulnerabilities vs. Cybersecurity Risk Management

Apache Log4j Vulnerabilities vs. GRC On December 10, Apache released details about a Log4j-core vulnerability nicknamed "Log4Shell". It is documented in CVE-2021-44228, and rated a rare 10 out of 10 on the CVSS vulnerability rating scale. Log4j-core

SOC2, CISO, vCISO, Security Program

Understanding the Business Value of SOC 2 Compliance

System and Organizational Controls 2 (SOC 2) is sometimes known as Service Organization Controls. Maintained by the American Institute of Certified Public Accountants (AICPA), SOC 2 is a standard for auditing and reporting on the efficacy of

SOC2, CISO, vCISO, Security Program, Risk Assessment

Bridging the gap between CISOs

Facing the challenges of new cybersecurity and privacy laws, a sharp increase in cybersecurity litigation, and the ceaseless evolution of ransomware and cyberthreats, the role of Chief Information Security Officer (CISO) has become critical to

Blog

Subscribe For Updates

Recent Posts

Related Articles By Topic

Related Articles By Topic

Three Ways to Improve Your Bottom Line Using a vCISO

Cybersecurity – Responsibility vs. Accountability

The Meaning of SOC from the AICPA

EU Privacy - New GDPR Data Transfer Tools

The Four Essential Elements of SOC 2 Type 2 Compliance

vCISO - Stories from the Trenches

What are the SOC 2 Trust Services Criteria?

Apache Log4j Vulnerabilities vs. Cybersecurity Risk Management

Understanding the Business Value of SOC 2 Compliance

Bridging the gap between CISOs

John MacInnis

Recent Posts

1 Three Ways to Improve Your Bottom Line Using a vCISO

2 Cybersecurity – Responsibility vs. Accountability

3 The Meaning of SOC from the AICPA

4 EU Privacy - New GDPR Data Transfer Tools

5 The Four Essential Elements of SOC 2 Type 2 Compliance

6 vCISO - Stories from the Trenches

7 What are the SOC 2 Trust Services Criteria?

8 Apache Log4j Vulnerabilities vs. Cybersecurity Risk Management

9 Understanding the Business Value of SOC 2 Compliance

10 Bridging the gap between CISOs