If you aren’t familiar with the Secure Controls Framework (SCF), you should be. It’s a non-profit organization dedicated to providing content that helps organizations navigate the security and compliance maze. Right now they are rolling out the ‘Security & Privacy Capability Maturity Model’ ...

In case you are new to the world of cybersecurity and are struggling to learn or understand some of the new terms you are hearing, don’t worry, we’re here to help! Some concepts have been around for years, but many are gaining traction right now due to high-profile data breaches, advances in cyber ...

A SOC 2 report has 5 Trust Services Criteria, which have previously been commonly called Trust Services Principles. These Trust Service Criteria are the basic elements of security. This includes security on organizational controls, access controls, basic risk assessment, as well as the ability to ...

HITRUST Certification is growing in popularity. What started as a framework for the healthcare industry has now expanded to include other regulated industries. Continual changes to cybersecurity, cloud technology, regulations, and other factors can make the road to achieving HITRUST Certification ...

A Systems and Organizational Controls (SOC) report provides guidance on standards that should be used for operational and technological business risks. There are 3 different SOC reports and they can be applied to virtually any industry or business sector. In the past, SOC reports were focused on ...

The news of the Capital One breach rocked the banking industry this week. It is significant because it wasn’t a virus or an outside hacker but allegedly a previous employee of a Capital One vendor who gained access to over 10 million customer records. Surprisingly to some, the percent of breaches ...

One of the biggest news items this week in the world of security is the Equifax settlement with the FTC. The Equifax data breach was one of the biggest ever reported, affecting over 150 million customers. Equifax was accused of failing to fix a patch to its network that resulted in the breach. As a ...

Today is an exciting day for Ostendio customers as we launch the third component of our CrossWalk feature set - CrossWalk Assessments. This new capability makes the MyVCM Platform the simplest and most effective way to prepare for and execute security audits. It automatically creates and ...

2019 has been a great year so far for Ostendio! More companies than ever are using MyVCM for Security and Risk Management (also called Integrated Risk Management - IRM), and we’ve been hard at work innovating the platform. In fact, we’ll have some big announcements very soon on that front...stay ...

If you’re a company with the view that cybersecurity is largely an IT issue, you may take the attitude of “We’ve got this.” Hold that thought. When did you last have a security risk assessment (SRA)? Also known as a security risk analysis, the comprehensive information security threat assessment is ...