Top Tips for Improving Board Communication Around Security
A panel of security professionals discuss the top three tips for how CISOs and risk officers can help improve board communication around security
Read Article
Schellman & Company, LLC Achieves Certification as a Great Place to Work
Tampa, FL, April 3, 2019 - Schellman & Company, LLC (Schellman), a leading provider of attestation and compliance services, announced today that it has been officially certified as a...
Read Article
HIPAA Audit Log Retention Requirements – Do I really need to retain all my audit logs for 6 years?
I have been asked this question by a few clients recently and unfortunately the answer is not so straightforward, especially for Business Associates. If you do a search on this topic...
Read Article
Time to Take a Quantum (Computing) Leap
A roomful of chief digital officers in suits and ties stood rapt in a Columbia University auditorium, listening as 20-something PhD candidate Jessica Pointing explained the difference...
Read Article
Schellman & Company Recognized as a Top 100 CPA Firm by Accounting Today
Tampa, FL, March 19, 2019 – Tampa-based CPA firm, Schellman & Company, LLC (Schellman), a leading provider of attestation and compliance services, has once again been named one of the...
Read Article
If You’re Not First, You’re Last: Risks of Delaying CCPA Compliance
Introduction
— by Lindsey Ullian, Threat Stack Compliance Manager
Read Article
B0r0nt0K Ransomware Threatens Linux Servers
A new cryptovirus called "B0r0nt0K" has been putting Linux and possibly Windows Web servers at risk of encrypting all of the infected domain's files.
Read Article
The 11 Biggest Issues IT Faces Today
From securing IoT to retraining IT talent to finding new revenue streams, CIOs have more than their share of concerns keeping them up at night.
Each year we talk with tech leaders...
Read Article
New Privacy Obligations from CCPA’s Proposed Amendments
For those not tracking the evolution of California’s Consumer Privacy Act (CaCPA), we’ve got some updates for you! While most are just familiarizing themselves with CaCPA’s original...
Read Article
Stop, Celebrate, and Listen - International Women's Day 2019
Within the past few months, I was fortunate enough to represent Schellman & Company at various women’s leadership conferences. These events were industry-specific, with one being...
Read Article
6 Hot IT Leadership Trends — and 6 Going Cold
As the CIO role becomes increasingly strategic, risk aversion and a results-oriented mindset take a backseat to increasingly influence and driving organizational change.
Read Article
Supply Chain Software Poses Security Risks
Poor internal security procedures and a lack of compliance protocols -- especially for small suppliers -- can introduce cybersecurity threats into global supply chains.
Read Article
Why you need a digital forensics team (and the skills to look for)
Prevention and detection aren't enough. To better defend against future intrusions, you need a strong digital forensics team that can analyze attacks.
In a world where enterprises are...
Read Article
Tips for Preventing Supply Chain Attacks
Defining your company's security requirements and having a cyber-risk management program to evaluate third-party services can reduce the risk of attacks on supply chain software....
Read Article
Schellman’s Response to the EDPB Comments
Comments by Schellman & Company, LLC on the European Data Protection Board’s Annex 1 of the “Guidelines 4/2018 on the accreditation of certification bodies under Article 43 of the...
Read Article
Phishing: Think like a cybercrook
Phishing still steamrolls organizations
Phishing attacks rely on a single moment of inattention or ignorance. Follow a link and the results are front-page news. A strategy for...
Read Article
Supply and Demand (for security)
2018 was the year that raised the alarm in earnest about potential vulnerabilities in the supply chain for enterprise computing systems.But with such diverse networks and widespread...
Read Article
Microsoft Supplier Security and Privacy Assurance (SSPA) Program Attestation
If your organization is a current or aspiring Microsoft vendor, you’re probably familiar with the Microsoft Supplier Security and Privacy Assurance Program (SSPA) program (previously...
Read Article
Full Sail Ahead: Navigating PCI Compliance on Kubernetes - Part 1, Networking
Introduction
Welcome! In the upcoming series of articles (this is Part 1), I’ll be discussing some things to consider if you want to use Kubernetes to host an application that is...
Read Article
