Security and Compliance Blog

Featured

Email Security Basics You Need to Know

August 6, 2018 • Published by Mark Carl
Access Control • Endpoint Security

I hate to say it, but what we all hear way too often is true: Nothing will focus you on your business’ cybersecurity like a data breach. Dealing with the aftermath of a breach is also much more expensive than proactively implementing the necessary security tools. If you’re a small business, a breach of your […]

Does Your Business Need a PCI DSS Readiness Assessment?

July 27, 2018 • Published by Marc Punzirudu
Compliance • PCI Compliance • Security Assessments

A PCI DSS readiness assessment (also known as a gap analysis) is an effective method for finding and fixing compliance holes efficiently and economically. Read this post to learn if your business can benefit from a readiness assessment.

How to Influence PCI Compliance Program Success

July 16, 2018 • Published by Tracee Collins
Payment Security • PCI Compliance

Merchant service providers implement PCI compliance programs to lessen the likelihood of a data breach happening among the merchants within their portfolios. These programs help raise awareness of, and compliance with, the Payment Card Industry Data Security Standard (PCI DSS).But compliance is no small task, and applying the PCI DSS principals across a portfolio of tens (or even hundreds) of thousands of merchants can be daunting. That’s why I’m here at ControlScan: It’s my job to ensure our partners achieve measurable PCI compliance program success.

Featured

6 Ways to Find the Best PCI QSA

June 25, 2018 • Published by Marc Punzirudu
Compliance • Security Assessments

How do you find the best PCI QSA for your company? Here are the 6 criteria you should apply when searching for your next Qualified Security Assessor.

Healthcare Data Security Requires Active Monitoring and Management

April 13, 2018 • Published by Kurt Osburn
Active Monitoring • Compliance • MDR

As a security consultant, I’ve been in a lot of hospitals, clinics and practices—and I’ve seen a lot of “worry” over the cybersecurity threat landscape. I’d like to see more of this worry translate into action, because it’s just not happening.Other than worry, what can healthcare institutions and their IT/IS leaders do to protect electronic personal health information (ePHI)? I have been part of three major healthcare breaches and post-breach forensics revealed that two of them could have been limited in scope if they had been actively monitoring and alerting to changes inside their IT networks.

Why Payment Security Innovation is in Hyperdrive

March 29, 2018 • Published by Admin
Point of Sale

Outpacing cybercriminals’ tools and techniques is tough work, and that’s why the payments industry is embracing payment security innovation. ControlScan Executive Chairman Tom Wimsett recently sat down with Jason Oxman, CEO of the ETA, to discuss the challenges facing acquirers, ISOs, processors and payment facilitators as they work to assist merchants with security and compliance.

Healthcare Data on Your Mobile Device

January 26, 2018 • Published by Kurt Osburn
Mobile Security • Security Awareness

This morning I read that Apple is letting you keep your medical records on your iPhone or Apple Watch and it got me thinking: How secure will this data be? How well will people work to protect their personal health data? I am a cybersecurity guy and I am a skeptic, so let me give you some facts and then some things to think about.

Your Penetration Test Cost is About to Go Up

December 12, 2017 • Published by Duane Reeves
Compliance • Network Security • Vulnerability Management

Penetration tests have always had a higher price tag, but their overall cost to you is about to increase in 2018. Here’s what’s changing and how you can keep these costs contained in 2018 and beyond.

Featured

Phishing Attempts: Increasingly Prevalent and Sophisticated

November 17, 2017 • Published by Mark Carl
Malware • Security Awareness • Social Engineering

When they’re successful, phishing attempts can have a significant impact on you personally, as well as on your workplace. They begin innocently enough—a seemingly legitimate DocuSign request or email from a friend—but they can quickly turn your world upside down.Avoid becoming a victim of phishing by following these 3 best practices.

ControlScan Blog

Stay informed with the latest security + compliance updates, news and best practices.

Email Security Basics You Need to Know

Read More

Does Your Business Need a PCI DSS Readiness Assessment?

Read More

How to Influence PCI Compliance Program Success

Read More

6 Ways to Find the Best PCI QSA

Read More

Healthcare Data Security Requires Active Monitoring and Management

Read More

Why Payment Security Innovation is in Hyperdrive

Read More

Healthcare Data on Your Mobile Device

Read More

Your Penetration Test Cost is About to Go Up

Read More

Phishing Attempts: Increasingly Prevalent and Sophisticated

Read More