Compliance

An unauthorized employee accessed Ikea's customer database, but it's unclear what the intention was.

Security Pro File: The former Army captain, whose security startup is on an upward trajectory, works hard to "make compliance suck less."

The updated security payment standard's goal is to “address emerging threats and technologies and enable innovative methods to combat new threats” to customer payment information, the PCI Security Standards Council says.

Whether it's PCI-DSS, SSDLC, or GDPR, the criteria that security standards expect businesses to uphold are neither realistic or feasible.

The new EU regulation is a response to the rise of ransomware attacks and other new cyberthreats that have proliferated in the wake of the global pandemic.

With nine in 10 companies adopting a multicloud strategy, service providers are focused on finding ways to support the management and security efforts of businesses that rely on multiple cloud resources.

Using blockchain, multifactor authentication, or signatures can help boost authentication security and reduce fraud.

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Companies are more likely to rely on outside attorneys to handle cyber response in order to contain potential lawsuits. Meanwhile, cyber-insurance premiums are rising but covering less.

That announcement may feel good, but if your prospective acquisition's cybersecurity levels are substandard, it might be best to hold off.

If you cannot track, access, or audit data at every stage of the process, then you can't claim your data is secure.

As mandatory reporting bills work their way through the halls of Congress, what should businesses do to prepare for this pending legislation?

There is currently no specific time frame during which banks must report to federal regulators that a security incident had occurred. A new notification rules changes that to 36 hours.

The popular Trojan has re-emerged on the scene several months after the botnet infrastructure behind it was disrupted by law enforcement.

OT security engineers and personnel should approach senior management with an emphasis on risk reduction benefits and with a concrete plan to secure budget and funding before it's too late.