Articles, podcast episodes, case studies, guides, advisories and news, newest first.
NIST 800-53 produces information security standards and guidelines for federal information systems. It guides federal agencies in documenting and implementing controls t…
Michael Petrov··1 minNIST-CSF sets information security standards and guidelines for serious infrastructure as defined within the Executive Order 13636 from the President of the United State…
Michael Petrov··1 minSince IT environments can generate millions of logs daily, DoDI 8500.2 has recommendations of analyzing and reporting on log data can reduce manual or homegrown remedies…
Michael Petrov··1 minThe Massachusetts General Law Chapter 93H regulation 201 CMR 17.00 was established to protect personal information of residents of the Commonwealth of Massachusetts. Thi…
Michael Petrov··2 minGLBA, also known as the Financial Modernization Act of 1999, was enacted to secure protection over customer records and information. To satisfy the riles and provisions…
Michael Petrov··1 minThe PCI DSS was created to encourage and enhance cardholder data security and facilitate the extensive adoption of consistent data security measures worldwide. This appl…
Michael Petrov··2 minNERC has its own framework to protect bulk power systems against cybersecurity compromises that could result in operational failures or instability. The NERC CIP v5 furt…
Michael Petrov··2 minSOX requires that all publicly traded companies establish and follow a framework of internal controls that support accountability and integrity of the financial reportin…
Michael Petrov··2 minHMG organizations are required to follow Protective Monitoring for HMG ICT Systems, based on Communications-Electronic Security Group’s GPG 13 to gain access to UK GCSX,…
Michael Petrov··1 minThe ISO 27001 standard is a model for establishing, implementing, operating, monitoring, reviewing, maintaining and improving management systems information security (IS…
Michael Petrov··2 minFISMA requires all federal agencies to document and implement controls for information technology systems that support their operations and assets. The National Institut…
Michael Petrov··2 minThe Health Insurance Portability and Accountability Act of 1996 (HIPAA) outlines relevant technical and non-technical security standards to ensure individuals’ ePHI, “el…
Michael Petrov··2 min