Sue Poremba

A new PCI Security Standard was announced for software-based PIN entry on commercial off-the-shelf devices. Learn more now.

I mentioned earlier the role that GDPR will play in any GRC framework, whether that framework is just getting underway or has been established for some

We know that certifications can be helpful for your security staff as a way to better recognize and mitigate threats, as well as to ensure your

As you put together your governance, risk and compliance (GRC) framework, are you thinking about how the General Data Protection Regulation (GDPR) fits

I’ve mentioned the importance of turning over your GRC strategy to a point person, or better yet a team, but it isn’t easy.Having real leadership in GRC

One of the areas that has to be covered by GRC is cloud computing, but I suspect that this is an area that is dragging behind. Lots of organizational

Congratulations. If you are reading this article, you have either decided that your company needs to create a GRC strategy to improve your overall

The 3 areas that make up GRC are not equal, or at least they won’t balance equally. Learn about the GRC framework here.

We know that tech jobs require expertise in hard skills like programming and math. However, as Holly Benson, ‎VP and Organizational Transformation

GDPR, or General Data Protection Regulation, is months away from implementation. In May 2018, organizations that do business within the European Union

I talk a lot about the cybersecurity problems organizations face, so I thought I’d end 2017 with some hope. What changes will we see in security solutions

Usually when I write up a post, I’m reaching out to readers in a business context – what kind of threats are affecting your networks, how that relates