The California Consumer Privacy Act’s (CCPA) cybersecurity audit regulations, finalized September 23, 2025, became effective January 1, 2026, establishing the first ...

The Center for Internet Security (CIS) released a “Guide to Defining Reasonable Cybersecurity” at the RSA Conference this year, setting out to specify what an organization must do to meet the standard ...

They were once introduced as the SANS Critical Security Controls (SANS Top 20) in 2008 by an international, grassroots consortium bringing together companies, government agencies, institutions, and ...

As your clients’ trusted technology advisor, it’s critical for managed service providers (MSPs) to keep up with the latest standards in cybersecurity and help protect clients’ assets from threats. To ...

By combining ConnectSecure’s expertise in vulnerability management with CIS’s globally recognized cybersecurity framework and guidance, the program aims to help organizations establish stronger ...

The Center for Internet Security provides consensus-based, vendor-agnostic configuration standards for the cloud. Known as CIS Foundations Benchmarks, these best practices were developed to help ...

Verizon’s recently released 2023 Data Breach Investigation Report (DBIR) provides organizations with a comprehensive analysis of the evolving threat landscape and valuable insights into incident types ...

The nonprofit Center for Internet Security (CIS) announced new guidance for organizations trying to wring the most value out of their tight cybersecurity budgets. Its recently released Community ...

NIST's CSF, used with other guidance, can help map risk to actual threats and better comply with security mandates such as the U.S.'s cybersecurity executive order. The U.S. federal government has ...

This mapping serves to align CCM with CSF and to identify the equivalence, gaps, and misalignment between the control specifications of the two frameworks. “By expanding upon the CCM’s current mapping ...