This document establishes the policy for the Information Security Program at Western Illinois University (WIU). The formation of this policy is driven by many factors, including the need to protect ...

This Written Information Security Program describes the safeguards implemented by DePauw University to protect confidential data. The goal of the program is to ensure the security of these assets to ...

The objective of Connecticut College in the development and implementation of this comprehensive written information security program (“WISP”) is to create and guide the implementation of effective ...

Rende is the founder & CEO of Rhymetec, a cybersecurity firm providing cybersecurity, compliance and data privacy needs to SaaS companies. Businesses live and die by their budgets, so many ...

The management of information risk has become a significant topic for all organizations, small and large alike. But for the large, multi-divisional organization, it poses the additional challenge of ...

If the economic downturn has proven anything, it’s that many CISOs still struggle to articulate the value of their security programs and justify the security budget to business and executive ...

To continue reading this content, please enable JavaScript in your browser settings and refresh this page. As cyber threats become more sophisticated and regulatory ...

In its annual audit required by the Federal Information Security Modernization Act of 2014, OIG said it reviewed HHS programs and practices against its core and supplemental metrics. Through the ...

An audit by the Office of Inspector General concluded that information security programs at both the Federal Reserve Board and the Consumer Financial Protection Bureau are no longer effective due to ...

On October 31, the Fed’s Office of Inspector General (OIG) released its annual Federal Information Security Modernization Act audit of the CFPB’s information security program, concluding the program’s ...

Shutdown Kills Key Federal Cybersecurity Information-Sharing Program The 2015 Cybersecurity Information Sharing Act provided a legal framework for companies to share data with the government, but ...

The purpose of this policy is to assist the organization in its efforts to fulfill its fiduciary responsibilities relating to the protection of information assets and comply with regulatory and ...