Security and Compliance Blog

Minimizing the Human Impact on Data Security

August 28, 2017 • Published by Chris Bucolo
Security Awareness • Vulnerability Management

These days many organizations do not feel confident about their ability prevent a data breach, mainly because they feel they can’t trust the humans working for them. And for good reason! Cyber criminals continue to exploit the human element, which was blamed for over 400 reported data breaches and 7.6 million+ compromised records in 2016.Regardless of whether the employee is knowingly part of a malicious effort, or is inadvertently involved in allowing an intrusion or other form of unintended disclosure, a breach of valuable data is not what you want to have happen. Therefore, you must minimize the human impact.

Compliance or Security: What are you trying to accomplish?

August 16, 2017 • Published by Kurt Osburn
Compliance • Security Assessments

I’ve been an information security assessor (PCI, HIPAA, ISO, etc.) for a long time and it’s always interesting to find out why a company has brought me in to do an assessment.Is the goal to shore up their existing security environment, or just check a compliance box to make one of their clients or vendors happy? The answer to that question will usually determine the assessment’s success.

Don’t Confuse P2PE and Firewall Functionality

July 24, 2017 • Published by Marc Punzirudu
Encryption • Firewalls • Malware

The ability to devalue credit card data has made point-to-point encryption (P2PE) technology a hot topic among franchisors. And what’s not to love? With a PCI P2PE solution in place, your franchise can check off that PCI compliance box as well as rest assured that your payment transactions are safe and secure.But is securing your credit card transactions between the POS and the payment processor all your business should worry about? Does implementing P2PE make every other security technology irrelevant to your business?

Featured

Upping the Ante on Payment Card Data Security

July 16, 2017 • Published by Mark Carl
Point of Sale

Payment card data security isn’t a new concept, yet businesses everywhere still can’t get it right. The payment card industry has a growing body of standards, merchants and technology providers strive to follow them, and consumers continue to demand them.But payment card data breaches still happen. Regularly. Why?It’s time we upped the ante on our efforts to help merchants protect themselves.

It’s Time to Redefine the IT Security Perimeter

June 5, 2017 • Published by Kurt Osburn
Cloud Security • Network Security • Security Assessments

As an IT security assessment professional, my job is to look at companies’ data security zones and their network perimeter compliance. I am looking at the normal stuff: Firewalls, servers and hardening standards as required by PCI, HIPAA, ISO 27001, etc.Without properly implemented and maintained security technologies in place, it’s impossible to protect your perimeter from compromise. But are you truly clear on what that perimeter is?

The WannaCry Ransomware Attack: 5 Things IT Pros Can Learn

May 21, 2017 • Published by Kurt Osburn
Endpoint Security • Ransomware • Security Awareness

Last week was a rough one in the IT world, as organizations around the globe scrambled to avoid being caught up in the WannaCry ransomware attack. If your organization was spared this round, it doesn’t mean you should pat yourself on the back and move on, business as usual. Fact is, most organizations aren’t at a state of security maturity that affords them this level of comfort.Read on for my list of 5 things any IT professional can learn from the WannaCry ransomware attack.

New Data Security Warning for FTP Use in Healthcare

April 19, 2017 • Published by Marc Punzirudu
Encryption • Network Security

FTP servers are essential for sharing files and data, but healthcare providers continue to utilize them in an insecure manner. Just last year, the ControlScan Security Consulting team saw this in action within a large healthcare organization. What happens when FTP goes wrong and how can you prevent your FTP server from leaking ePHI? Read on to find out.

Social Engineering: Don’t Fall Victim to Tax Phishing!

March 31, 2017 • Published by Steve Robb
Endpoint Security • Security Awareness • Social Engineering

Historically speaking, tax season is prime for tax-themed scams and social engineering attacks. Specifically, the number of W-2 phishing scams have peaked recently. Attackers and social engineers begin by targeting finance and HR departments with spear phishing emails that spoof C-level executives and request employee W-2 forms.

Featured

Five Things You Can Do Now to Avoid Ransomware

March 29, 2017 • Published by Alex Knight
Endpoint Security • Malware • Security Awareness

The popularity of ransomware among cyber thieves continues to grow, not just in America but around the globe. Ransomware victims paid over a billion dollars in 2016 for decryption keys in the hopes that their data would be unlocked. Sometimes it was, sometimes it wasn’t. Read this blog post to learn the five things your business can do now to avoid becoming a victim of ransomware.

ControlScan Blog

Stay informed with the latest security + compliance updates, news and best practices.

Minimizing the Human Impact on Data Security

Read More

Compliance or Security: What are you trying to accomplish?

Read More

Don’t Confuse P2PE and Firewall Functionality

Read More

Upping the Ante on Payment Card Data Security

Read More

It’s Time to Redefine the IT Security Perimeter

Read More

The WannaCry Ransomware Attack: 5 Things IT Pros Can Learn

Read More

New Data Security Warning for FTP Use in Healthcare

Read More

Social Engineering: Don’t Fall Victim to Tax Phishing!

Read More

Five Things You Can Do Now to Avoid Ransomware

Read More