Topic of the Week
Welcome to our "Topic of the Week" section, where we spotlight key issues in security, privacy, audit, risk, and compliance. Each week, we look into a relevant topic, offering insights and strategies to help navigating the ever-evolving landscape of regulations and best practices
Free Stuff? On My Way!
As someone from abroad, one thing I’ve always found fascinating in the U.S. is the obsession with credit cards and “building credit.” For the longest time, it sounded to me like trying to pay with Monopoly money. It wasn’t until I got a car that I finally started to (sort of) understand how it all worked.
Please, it’s not soccer, it’s football!
Summer is finally here! And if you're one of the lucky ones headed to Europe on vacation (is it just me, or is everyone going to Greece or Italy these days?), here's a little guide from someone who grew up there and now lives in the U.S.
Digging Deeper: U.S. Sensitive Data Rule
This week, we continue the conversation around the Sensitive Data Rule that we discussed last week and the week before, but will dig a little deeper into some of its intricacies. Specifically, we will discuss the types of prohibited transactions.
CISA Security Controls and the Sensitive Data Rule
Last week, we discussed the Sensitive Data Rule and what this rule means, who it affects, and what your organization should be doing right now to prepare. One important thing to note from that discussion is the relevance of the CISA Security Controls to the Sensitive Data Rule. In the Sensitive Data Rule there are two types of data transactions that are defined, prohibited transactions and restricted transactions.
Sensitive Data Rule - Department of Justice 2025
As the U.S. doubles down on protecting sensitive personal and government-related data from falling into the hands of the wrong people, a new privacy regulation is on the horizon. The Department of Justice’s Sensitive Data Rule officially takes effect July 8, 2025, and this current “grace period” gives you the chance to prepare. This week we are digging into what this rule means, who it affects, and what your organization should be doing right now to prepare.
Oh, Nice, Another Request to Change My Password… *sighs*
A couple of weeks ago, we talked about the massive data breach that exposed millions of logins. When I told my partner about it, and recommended he go change his passwords, he asked why, since, more than likely, his information was already out there, and it got me thinking. Usually, we are just told to change our passwords, but nobody really explains why.