Cybersecurity and PCI DSS eCommerce for Online Transactions

PCI DSS ecommerce featured

Online shopping has ballooned in 2020. While most consumers have been moving to online purchases for years, the onset of COVID-19 has kickstarted a huge shift to online shopping across several industries. That’s why businesses that may never have normally considered online transactions are fielding new ways for their customers to engage with them through eCommerce functionality. That kind of online shipping will almost inevitably allow customers to make purchases with credit cards, which will mean PCI DSS eCommerce compliance. 

Here we discuss the importance of understanding the sea change in online transactions, and how your organization can start to think about PCI DSS compliance for those transactions even if you’ve never accepted them before. 

Read More

The Impact of COVID-19 on SOC 2 Attestation

SOC 1, SOC 2 and SOC 3 SOC Audit and Assessments; we are ready when you are! Call +1 (888) 896-7580 today.

COVID-19 has changed how we work, and as the first third of 2021 comes and goes many IT and cloud companies have adapted. However, companies that still need to undergo SOC 2 attestation, or who still have not done so for one reason or another, might find the current challenges of auditing and compliance under pandemic restrictions intimidating. 

Here, we’ll discuss an overview of some of the challenges that might come up during SOC 2 attestation during COVID-19. Rather than seeing these challenges as hopeless, we believe that, with the right security partner, they are easily dealt with as part of getting back to business. 

 

Read More

What is the Cybersecurity Maturity Model Certification Framework (CMMC)?

CMMC security featured

Government work is the new and lucrative frontier for IT and cloud providers, and part of its competitiveness is the rigorous requirements for service providers that weed out those who aren’t prepared for such work, leaving effective and professional outfits that can function at a high-level and provide services that other companies can’t. 

While many providers know about standards like FedRAMP or NIST requirements, not many know about CMMC. This relatively new framework impacts IT and cloud providers who want to work with agencies under the Department of Defense (DoD) but provides a clear picture of the requirements these providers must meet to work with sensitive data.

Read More