PCI DSS Compliance
The Payment Card Industry (PCI) Data Security Standard (DSS) is one of many PCI standards created to protect cardholder data. Merchant-based vulnerabilities may appear almost anywhere in the card-processing ecosystem including point-of-sale devices; personal computers or servers; wireless hotspots or Web shopping applications.
HIPAA & HiTech Compliance
The relationship between HIPAA and HITECH began in 2009 with significant changes related to the OCR Enforcement and Breach Notification Rules. Covered Entities are required to inform the Covered Entity of any unauthorized disclosure of PHI. Business Associates have the same legal requirement under HIPAA and HiTech. Both entities are required to conduct periodic risk assessments in order to determine where gaps in their compliance efforts exist.
ISO 27001 Compliance
The ISO 27001 standard is designed to function as a framework of standards for how an organization should manage their information and data. This includes all policies and processes relevant to how data is controlled and used, regardless of what industry you are in. ISO 27001 certification will enhance your reputation and help you avoid financial damages or penalties from security breaches.
CIS Top 20 Critical Security Contols
We evaluate a set of actions based on three distinct categories (Basic, Foundational, Organizational) of CIS (Center for Internet Security) Controls, to protect organizations and their data from known cyber attack vectors. By focusing on a risk based approach, we help you build and maintain an effective cyber security program.
