Truvantis Blog (10)

vCISO - Stories from the Trenches

Disasters, heroics, funny stories, and impacts to business success Nate Hartman describes a six-month stint as an acting CISO or virtual CISO (vCISO) at a fast-paced Silicon Valley tech company.

SOC2, CISO, vCISO, Security Program

What are the SOC 2 Trust Services Criteria?

The SOC 2 Trust Services Criteria (TSCs) for information technology, is a framework for designing, implementing and evaluating information system controls. The purpose of controls is to ensure your information system can meet its objectives. The

Security Program, Privacy

Apache Log4j Vulnerabilities vs. Cybersecurity Risk Management

Apache Log4j Vulnerabilities vs. GRC On December 10, Apache released details about a Log4j-core vulnerability nicknamed "Log4Shell". It is documented in CVE-2021-44228, and rated a rare 10 out of 10 on the CVSS vulnerability rating scale. Log4j-core

SOC2, CISO, vCISO, Security Program

Understanding the Business Value of SOC 2 Compliance

System and Organizational Controls 2 (SOC 2) is sometimes known as Service Organization Controls. Maintained by the American Institute of Certified Public Accountants (AICPA), SOC 2 is a standard for auditing and reporting on the efficacy of

SOC2, CISO, vCISO, Security Program, Risk Assessment

Bridging the gap between CISOs

Facing the challenges of new cybersecurity and privacy laws, a sharp increase in cybersecurity litigation, and the ceaseless evolution of ransomware and cyberthreats, the role of Chief Information Security Officer (CISO) has become critical to

Penetration Testing, Security Program, Risk Assessment

Combating Ransomware Attacks Through Comprehensive Penetration Testing

Ransomware is still a major threat. In fact, the Tactics, Techniques and Procedures (TTP's) of ransomware gangs have evolved so much that it has created new business models within the darknet where premium services such as Ransomware as a Service

Privacy

Three steps to Cyber Security Programs for CPRA, HIPAA, GDPR, PIPEDA, CCPA.

Many new data privacy laws are emerging. Businesses must continually prove privacy compliance. Review current data privacy laws and get advice on how to build a multi-compliance Security & Privacy program.

CISO, vCISO, Penetration Testing, HIPAA, Security Program, Risk Assessment

The One Reason to Pen Test Data Backup Systems - Ransomware Protection

At the heart of your disaster recovery plan, organizations often disregard data backup and recovery systems when it comes to pen testing and maintaining security. Vulnerable backup systems make for an attractive target by ransomware gangs, grief/

PCI DSS, CISO, vCISO, Penetration Testing, HIPAA, Security Program, Risk Assessment, Red Teaming

The 0-day in the Room Nobody is Talking About: Scope

Scope is an important shaping tool that, when leveraged properly, can help enhance engagement outcomes during penetration testing, red team and other security operations. Like any tool, however, when used incorrectly it can have devastating

PCI DSS

PCI DSS Version 4.0: Preparing for the Future

The first quarter of the year 2022 should be an exciting time for everyone working with PCI DSS. The PCI Security Standards Council is scheduled to release first a “Stakeholder Preview” of the long-awaited PCI DSS v4.0, and then, presumably some

Previous Next

Blog

Subscribe For Updates

Recent Posts

Related Articles By Topic

Related Articles By Topic

vCISO - Stories from the Trenches

What are the SOC 2 Trust Services Criteria?

Apache Log4j Vulnerabilities vs. Cybersecurity Risk Management

Understanding the Business Value of SOC 2 Compliance

Bridging the gap between CISOs

Combating Ransomware Attacks Through Comprehensive Penetration Testing

Three steps to Cyber Security Programs for CPRA, HIPAA, GDPR, PIPEDA, CCPA.

The One Reason to Pen Test Data Backup Systems - Ransomware Protection

The 0-day in the Room Nobody is Talking About: Scope

PCI DSS Version 4.0: Preparing for the Future

1 vCISO - Stories from the Trenches

2 What are the SOC 2 Trust Services Criteria?

3 Apache Log4j Vulnerabilities vs. Cybersecurity Risk Management

4 Understanding the Business Value of SOC 2 Compliance

5 Bridging the gap between CISOs

6 Combating Ransomware Attacks Through Comprehensive Penetration Testing

7 Three steps to Cyber Security Programs for CPRA, HIPAA, GDPR, PIPEDA, CCPA.

8 The One Reason to Pen Test Data Backup Systems - Ransomware Protection

9 The 0-day in the Room Nobody is Talking About: Scope

10 PCI DSS Version 4.0: Preparing for the Future