KnowBe4

Security Awareness Training Blog

Compliance Blog

Compliance news as it relates to cybersecurity, who it affects, and how to stay compliant.

View Topics

NY Cyber Law Hits 3rd Deadline: Toughest Yet to Come, How To Get And Stay Compliant?

Sep 4, 2018 3:41:09 PM By Stu Sjouwerman
Craig A. Newman, partner at Patterson Belknap wrote: "By today, financial institutions are required to meet their next deadline for compliance with New York’s cybersecurity law. The ...
Continue Reading

[Heads-up] The May 2018 GDPR Deadline May Fuel New Extortion Attempts

Feb 20, 2018 11:21:29 AM By Stu Sjouwerman
Trend Micro has released its annual security roundup, and it shows several interesting trends that will likely continue into 2018. There is bad news and worse news, with a little bit of ...
Continue Reading

KnowBe4 Attains SOC 2 Type I Compliance For The Hosted Phishing And Training Product Offerings

Feb 11, 2018 1:59:38 PM By Stu Sjouwerman
KnowBe4, Inc, the world's largest security awareness training and simulated phishing platform, this week announced it has successfully completed a Service Organization Controls (SOC) 2 ...
Continue Reading

Which EU 2018 Directive Is More Important Than GDPR?

Jan 3, 2018 4:19:17 PM By Stu Sjouwerman
If you have sales offices in Europe, or full subsidiaries, you need to be aware of the NIS directive. Peter Dekker at Enisa warned about the following: During 2017, the GDPR buzz reached ...
Continue Reading

Complex regulations and sophisticated cyber attacks inflate non-compliance costs

Dec 15, 2017 5:21:15 PM By Stu Sjouwerman
The cost of non-compliance has significantly increased over the past few years, and the issue could grow more serious. 90 percent of organizations believe that compliance with ...
Continue Reading

URGENT - If IT and Marketing are not freaking out about GDPR compliance, you are not paying attention

Nov 24, 2017 3:04:00 PM By Stu Sjouwerman
I found an article about GDPR compliance written by the fine folks of HubSpot, which we use ourselves here at KnowBe4 use for marketing automation. We have customers in Europe, so our ...
Continue Reading

We're Still Not Ready for GDPR? What is Wrong With Us?

Nov 19, 2017 10:30:08 AM By Stu Sjouwerman
Sara Peters, Senior Editor at Darkreading wrote an excellent article about GDPR. It is both reprimanding and encouraging to get off our collective butts and do something about GDPR very ...
Continue Reading

Federal Contractor? Insider Threat Training Deadline June 1- Don't Lose Your Clearance

Jun 7, 2017 4:38:21 PM By Stu Sjouwerman
Insider Threat Training Requirement for US Gov't Contractors (Deadline May 31, 2017) SANS just alerted US federal contractors that wish to maintain their clearances must have completed an ...
Continue Reading

Cybersecurity Top Risk Consideration In Board Room

Dec 31, 2014 2:23:30 PM By Stu Sjouwerman
The Wall Street Journal polled its readers and asked them to rate the top compliance issues of 2014. The answers were very interesting! 
Continue Reading

PCI Publishes Guidance On Security Awareness Training

Nov 1, 2014 11:46:00 AM By Stu Sjouwerman
The Payment Card Industry Council thinks Security Awareness Training is so important that they just published a 25-page guidance paper that fully explains the why, how and what of ...
Continue Reading

Federal Compliance Rules Skyrocket

Jun 22, 2014 1:24:00 PM By Stu Sjouwerman
Underscoring the difficulty of compliance management in the context of just US federal rulemaking – not to mention rules published by state, local and other governments and organizations ...
Continue Reading

NISTs New Approach to Cybersecurity Standards

May 14, 2014 10:30:00 AM By Stu Sjouwerman
Applying Engineering Values to IT Security. The National Institute of Standards and Technology is developing new cybersecurity standards based on the same principles engineers use to ...
Continue Reading

4.8 Million Heftiest HIPAA Fine From Federal Regulators Yet

May 12, 2014 1:55:00 PM By Stu Sjouwerman
Federal regulators have issued a $4.8 million sanction, the largest HIPAA settlement to date, against two partnering New York healthcare organizations following a breach affecting just ...
Continue Reading

New Whitepaper: Improving the Compliance Management Process

Apr 13, 2014 8:27:00 AM By Stu Sjouwerman
We are excited to announce a new whitepaper that covers important compliance requirements that you are obligated to satisfy, provides some high level recommendations about what you can do ...
Continue Reading

Do you recognize yourself in The Compliance Curve?

Mar 7, 2014 3:57:00 PM By Stu Sjouwerman
Have a look at the curve here. Do you recognize yourself? It's the process that many IT pros told us they go through on a regular basis, much like Groundhog Day.  
Continue Reading

89% Fail To Maintain PCI Compliance Between Assessments

Feb 21, 2014 2:15:00 PM By Stu Sjouwerman
OUCH. Verizon said in a report this month that 89% of organizations that achieve annual compliance with the PCI Data Security Standard -fail- to maintain that status after passing the ...
Continue Reading

NIST Releases Voluntary Cybersecurity Compliance Framework

Feb 13, 2014 4:12:00 PM By Stu Sjouwerman
Continue Reading

The Relationship Between Compliance And Security

Feb 7, 2014 5:47:00 PM By Stu Sjouwerman
This venn-diagram illustrates the relationship between Compliance and Security in a funny way.
Continue Reading

Dont Let Your C-Level Execs Wind Up At Capitol Hill Like This

Feb 7, 2014 4:58:00 PM By Stu Sjouwerman
Continue Reading

CyberheistNews Vol 4, # 05

Feb 4, 2014 9:03:00 AM By Stu Sjouwerman
CyberheistNews Vol 4, # 05  
Continue Reading
Subscribe

Search Our Blog


Ransomware Hostage Rescue Manual

Subscribe To Our Blog

Posts By Topic

View all

Get the latest about social engineering

Subscribe to CyberheistNews