Receive articles and resources from the information risk management experts at FoxPointe.
This article was written by Chris Salone CISA CCSFP MBA In the final quarter of 2021 the Federal Deposit Insurance Corporation FDIC the Board of Governors of the Federal Reserve System and the Office of the Comptroller of the Currency the agencies issued a rule requiring any FDIC insured financial...
By Christopher Salone CISA CCSFP MBA This past year proved to be a year of rapid development for the cybersecurity and IT landscape As new threats emerged others continued to develop and evolve Throughout the year the FFIEC in an effort to help its institutions combat these threats issued new...
This blog was written and produced by Nick Cozzolino CISSP Director of Information Security at The Bonadio Group FoxPointe Solutions is The Bonadio Group 8217 s dedicated cybersecurity division Looking to get in touch with Nick Reach out today Nick Cozzolino ncozzolino bonadio com Data is the new oil We...
This blog was written and produced by Courtney Nist Senior Security Consultant CHQP CCSFP at FoxPointe Solutions Looking to get in touch with Courtney Reach out today Courtney Nist cnist foxpointesolutions com Based on the Verizon Data Breach Investigations Report of 2021 healthcare and outsourced service providers continue to be...
What is a SOC 1 Report A SOC 1 report also known as the Statement on Standards for Attestation Engagements SSAE 18 focuses on a service organization s controls that are likely to be relevant to an audit of a user entity s customer s financial statements SOC 1 reports...
Since the regulation came into effect in March 2019 the New York State Department of Financial Services DFS continues to strengthen the way that it enforces the Cybersecurity Regulation 23 NYCRR Part 500 With 23 distinct sections of the regulation DFS requires a comprehensive cybersecurity program for Covered Entities including...
As you were enjoying a cup of coffee the morning of December 18 2020 you might have been arranging your Holiday plans or ordering a last minute gift for a loved one Or perhaps you re part of the banking industry and as part of your morning routine you peruse...
In this day and age the risk of cybersecurity threats is becoming a concerning topic for organizations Reducing the risk of data breach has become a top priority for many businesses When it comes to minimizing risk an often overlooked area is third party risk Many organizations include an initial...
On April 2 2021 it was confirmed that a malicious user published the phone numbers and personal data of hundreds of millions of Facebook users for free online The information spanning from users across the globe includes phone numbers user IDs full names locations birthdates and some email addresses A...
An updated cybersecurity law that the IT organization along with other college university departments will need to continue to integrate into its compliance programs policies and controls is the recent changes to New York s General Business Law 899 aa and 899 bb aka SHIELD Act The compliance actions supporting...