Articles, news, and research on cybersecurity compliance and regulations.
We surveyed 2,374 EU-registered devices and 226 listed software makers for a way to report a vulnerability. Market leaders are ready. Others, not so much.
FISMA is a United States federal law that defines a comprehensive framework to protect government information, operations, and assets against threats.
Compare SIG, CAIQ, VSA, NIST, and HIPAA vendor security questionnaires: when to use each, and a side-by-side table.
This is a complete overview of HITECH Compliance. Learn how to ensure your organization is compliant with the HITECH Act in this in-depth post.
Protected health information (PHI) is any information about health status, provision of health care or payment for health care that is created or collected
Sensitive data is information that must be protected against unauthorized access.
Learn about the global costs of a data breach and how to implement the right defenses to protect your business.
This is a complete overview of the Florida Information Protection Act (FIPA). Learn about how to comply with FIPA with this in-depth post.
This is a complete overview of SOX Compliance. Learn how to ensure your organization is compliant with the SOX Act in this in-depth post.
NIST Special Publication 800-53 establishes an information security standard for the federal government.
Service Organization Control 2 (SOC 2) is an auditing standard developed by the American Institute of Certified Public Accountants (AICPA).
The Gramm-Leach-Bliley Act (GLBA) is a United States federal law requiring financial institutions to explain how they share and protect customer data.
A comprehensive overview of HECVAT 4. Learn how to leverage it to reduce your third-party risk exposure and likelihood of student data compromise.
Which reigns supreme? COBIT, ITIL or TOGAF? Find out which of these frameworks is best for achieving a more secure and digitally resilient posture.
This is a complete overview of security metrics. Learn how to use security metrics to maintain compliance with regulations in this in-depth post.
Learn about NIST SP 800-171 compliance, key requirements, and steps for implementation to protect Controlled Unclassified Information (CUI) effectively.
This is a complete overview of compliance monitoring best practices. Learn why compliance monitoring is required for many industries in this in-depth post.
UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.
