Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

vanta

Automate more of your compliance program with custom tests

Feb 12, 2024 By Vanta In Vanta
Today, we’re launching multiple customization improvements to Vanta’s automated test capabilities, previously announced at VantaCon in December. With Custom Tests, you now have the ability to adjust Vanta’s pre-built tests as well as create new tests from scratch with new logic. ‍ Custom Tests empower you to gather evidence across your systems and use Vanta’s automation to continuously monitor and alert you when items fall out of compliance.
Read Post
calligo

What is Cloud as a Service? Exploring Definitions, Current Trends, and Future Horizons

Feb 12, 2024 By Calligo In Calligo
In the rapidly evolving landscape of IT infrastructure, businesses are constantly faced with the critical decision of choosing between on-premises and cloud solutions. The allure of cloud computing, with its promises of scalability, flexibility, and cost efficiency, often leads organizations to assess the financial implications of their choices meticulously. In this blog post, we’ll delve into the complexities of assessing on-premises vs.
Read Post
splunk

ISO 27002: Information Security Controls Explained

Feb 12, 2024 By Joseph Nduhiu In Splunk
In the race to execute digital transformation strategies, the rear-view mirror never fails to shake off the looming cyber threats that are a significant stumbling block to any organizational objectives. Today, nearly 48% of organizations are experiencing more cyberattacks than the previous year.
Read Post

Vulnerability A03 : Injection - OWASP TOP 10

Feb 9, 2024 By VISTA InfoSec In VISTA InfoSec
Welcome to our latest video on the OWASP Top 10, focusing on Vulnerability A03: Injection. This video is designed to provide a comprehensive understanding of injection vulnerabilities, which are among the most common and dangerous security risks in web applications. In this video, we will explore the concept of injection vulnerabilities, their various types, and how they can be identified. We will also look at real-world examples to illustrate the potential impacts of these vulnerabilities when they are exploited.
View Video
trustcloud

SOC 1 vs SOC 2: Everything you need to know about the SOC attestations

Feb 9, 2024 By Satya Moutairou In TrustCloud
Service organizations often undergo SOC (Service Organization Control) attestation to assure clients and stakeholders of the effectiveness of their internal controls. Two prominent frameworks within the SOC domain are SOC 1 and SOC 2, each designed to address specific facets of a service organization’s controls. Read on to learn how to compare SOC 1 vs SOC 2 attestations.
Read Post
securitysenses

Safeguarding Sensitive Data: The Vital Role of Cybersecurity in Business Law Firms

Feb 8, 2024 By SecuritySenses In SecuritySenses
In an era marked by digital transformation and increasing reliance on technology, cybersecurity has become a critical concern for businesses across all sectors. However, for law firms specializing in business law, the need to protect sensitive client information and maintain confidentiality is paramount. As custodians of highly confidential data, including intellectual property, financial records and sensitive legal documents, business law firms face unique cybersecurity challenges and must implement robust measures to safeguard against cyber threats and data breaches.
Read Post
xalient

Xalient achieves ISO 27001:2022 Recertification

Feb 8, 2024 By Craig Ingham In Xalient
In a significant achievement, we are thrilled to announce our successful transition to the ISO 27001:2022 standard whilst also undergoing recertification. This recertification is the pinnacle of Information Security Management. The recognition by BSI in December 2023, with auditors acknowledging our commitment as “up there with the best of them,” underscores our dedication to providing the highest level of service to our customers.
Read Post

Customer Corner: How Apree Health Gained Container Visibility and Achieved Compliance

Feb 8, 2024 By Sysdig In Sysdig
Join David Quisenberry, Senior Manager of Information Security, and Cat Schwan, Security Team Lead, to learn how Sysdig’s powerful runtime insights empower Apree Health to identify, visualize, and eliminate Kubernetes vulnerabilities, threats, and misconfigurations in real time, and how automated evidence gathering and reporting helped them achieve both SOC 2 and HITRUST compliance. Interested in learning more about Sysdig Secure?
View Video
ignyte Team

Navigating Authority to Operate: FISMA or FedRAMP?

Feb 8, 2024 By Max Aulakh In Ignyte
Navigating Authority to Operate: FISMA or FedRAMP? Decades ago, the government stood on its own. While it would often contract out with individuals and companies for services, there was always a barrier between third-party operations and government operations to prevent intrusion, infiltration, or compromise. Over the years, though, society has grown more and more complex.
Read Post

Adapting to Legislative Demands: Insights on Cyber Security Compliance in Critical Infrastructure

Feb 7, 2024 By Razorthorn In Razorthorn
Welcome to Razorwire, the podcast dedicated to exploring the complex and evolving world of cyber security legislation. I'm your host, Jim, and in today's episode, we delve into the intricate landscape of cyber security legislation with our guests Steve Applegate and Phil Tonkin from Dragos.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.