Practical analysis and expert coverage across compliance frameworks, risk management, data privacy, and audit readiness.
Incident & Breach ResponseHighland Health Systems will pay $650,000 to settle negligence claims from an 83,543-patient data breach. Albany Gastroenterology Consultants is settling for $200,000 after compromising 57,751 patient
Regulatory BodiesWhen the U.K. s Serious Fraud Office announces an investigation into suspected fraud, false accounting, and money laundering at a telecom firm like Internet Mobile Communications Limited, internal aud
Technical ControlsBetween 2028 and 2030, you ll need to meet post-quantum cryptography deadlines. The systems you re responsible for determine whether you re facing a software upgrade or a multi-year infrastructure rep
Incident & Breach ResponseRecognizing Language Shifts in Compliance Investigations Your team may be missing critical signals during investigations by focusing solely on facts and not how those facts are delivered. Author Pamel
Get weekly security insights and compliance updates delivered to your inbox.
Regulatory BodiesThe Question at Hand The FTC s decision to end disparate impact consideration in most cases presents a dilemma for compliance officers. You ve invested years in controls to screen for unintended discr
Incident & Breach ResponseYour employee just sent a file with patient records. The voice on the phone seemed legitimate, perhaps the IT director or a vendor contact. Minutes later, your security team flags the activity. You re
Regulatory BodiesWhat Happened CISA recently added three vulnerabilities to its Known Exploited Vulnerabilities Catalog : CVE-2026-20349 affecting Cisco Secure Firewall ASA and FTD products, CVE-2026-68820 in Windows
Regulations & LawsThe Challenge When Illinois Governor signed SB 2886 in late 2024, compliance teams at healthcare organizations, insurers, and employers faced an immediate question: what exactly counts as biomarker da
Regulatory BodiesThe evolution of Gunra from a single threat actor to a ransomware-as-a-service (RaaS) operation in 2026 marks a significant shift in the threat landscape. With an 80% revenue split for affiliates, Gun
Incident & Breach ResponseScope - What This Guide Covers This guide addresses the threat of social media hijacking during ransomware incidents, focusing on: Social media account security controls within incident response plann
Data PrivacyThe compliance floor just moved. For years, you could treat COPPA under-13 threshold as your bright line. If your service wasn t directed at children and you didn t have actual knowledge of users unde
Governance & ControlsYour CISO just forwarded you a vendor demo for an AI-powered productivity monitoring platform. Your HR director wants to pilot keystroke analytics in customer service. Your legal team is asking whethe
Data PrivacyWhen a federal magistrate judge approved the protective order for Change Healthcare s stolen dataset, the 193 million affected individuals weren t the only ones watching. Every legal team handling bre
Regulations & LawsThe Health Information Privacy Reform Act, advanced by the HELP Committee with a unanimous vote, will require non-HIPAA-regulated entities to implement HIPAA-like protections within 18 months of enact
Incident & Breach ResponseYour organization s private cellular network isn t a security perimeter. It s a highway between your facilities, and if you re treating it as trusted infrastructure, you ve already failed a critical c
Data PrivacyYou re facing a data breach lawsuit. The court has ordered you to produce the stolen dataset to plaintiffs counsel. Now you need to decide: Do you fight the production order, negotiate custom security
Incident & Breach ResponseThe Challenge In April 2025, the FBI identified the first Gunra ransomware attacks. By January 2026, Gunra had transformed into a full ransomware-as-a-service (RaaS) platform, complete with affiliate
Incident & Breach ResponseHealthcare organizations are uploading patient data to external AI platforms faster than they re updating their vendor risk frameworks. A recent breach at Loma Linda University Health illustrates the
Regulations & LawsWhat Changed The FBI and South Korea s National Policy Agency issued a joint advisory in May 2026, highlighting a significant shift in ransomware dynamics. Gunra, which surfaced in April 2025 using le
Governance & ControlsThese questions started showing up in our CISOs Slack about six months ago. First, from a financial services team trying to scope their SOC 2 Type II audit. Then from a healthcare compliance lead wres
