Digital payments are, for the most part, the norm for commerce in the modern world. From swiping credit cards, tapping phones, or using credit card information in digital storefronts, a lot of payment information is moving through digital networks… and potentially insecure technologies. This is why credit card networks created the PCI DSS standard to govern security in the payments industry. 

PCI DSS governs these payment technologies, including developing and implementing payment tools at all customer touchpoints. This has led to the PCI DSS Secure Software Life Cycle (SLC) standard, a guideline designed to ensure that security is embedded right from the inception of software development.

Read More

The U.S. Department of Defense launched the Cybersecurity Maturity Model Certification (CMMC) in response to the escalating cyber threats. This initiative underscores the increasing emphasis on the maturity of cybersecurity programs as a benchmark for assessment and standardization within the Defense Industrial Base and its extensive supply chain.

Yet, a surprising revelation from Infosecurity Magazine indicates that a mere 22% of organizations have fully matured their cybersecurity programs. 

This article discusses the foundation of cybersecurity maturity, its significance, and best practices. 

Read More

Due to some recent actions against online medical providers like BetterHealth and GoodRX, the Department of Health and Human Services has released a new warning for covered entities regarding the tracking methods they use on their websites. 

While web tracking has become a typical technology for most businesses, it’s not a cut-and-dry proposition for healthcare providers who have to maintain patient privacy. 

Read More