The Much Anticipated ISO/IEC 27701:2019
For those that were monitoring the wire, ISO 27001 was released the week of August 5th as an extension of ISO 27001 and 27002.
Read Article
Inside-out analytics: Solving the enigmatic insider threat
To protect their corporations against data breach from internal and external sources, CISOs have a tool that is effective at identifying breaches but some employees might find it intrusive: analytics.
Read Article
How Bots Can Tell When the C-Suite Is Lying
Companies are applying natural language processing (NLP), sentiment analysis and machine learning to the financial sector, evaluating earnings calls and other public meetings to unearth information.
Read Article
Wake Up Hospitality: Marriott Fine Proves GDPR Legislation Has Teeth
Marriott announced that the UK ICO communicated its intent to issue a fine of over $124 million for infringements of the GDPR in relation to the Starwood guest reservation database incident.
Read Article
Rundown: The Cloudy Role of FedRAMP
On Wednesday July 17th, I had the distinct honor of providing the assessor perspective at a FedRAMP hearing held by the Subcommittee on Government Operations—a subset of the House Oversight Committee.
Read Article
How to get G, R & C Singing From the Same Hymn Book
Deciphering the conflicted angst of GRC
There is no one-size-fits-all for GRC so companies need to take a hard look at their regulatory requirements, along with their corporate culture...
Read Article
Schellman Recognized by Glassdoor: 12 Companies That Will Pay You to Travel the World
You’ve been bitten by the travel bug. But you don’t have to wait for your vacation days to kick in to travel the world; you can go global with your job instead. These companies are...
Read Article
Schellman Principal Doug Kanney Appointed to HITRUST CSF Assessor Council
We are proud to announce that the HITRUST Alliance has appointed Schellman & Co. Principal Doug Kanney to the HITRUST CSF Assessor Council and Quality Subcommittee. Below is the...
Read Article
Schellman Becomes PCI Qualified PIN Assessor
Schellman & Company has become a Qualified PIN Assessor (QPA) for the PCI PIN Security Program.
Read Article
Cross-Border Privacy System Gains Second U.S. Compliance Agent
(Article originally published on BloombergLaw.com)
Read Article
14 Companies That Let You Work Remotely
The growing trend for work flexibility has taken over the country. From health care to communications to tech, each industry offers roles that can be executed from the comfort of your...
Read Article
APEC announces new US accountability agent for CBPR certifications
The Asia-Pacific Economic Cooperation is set to boost the status of its Cross-Border Privacy Rules program in the U.S.
Read Article
Flexa Launches Crypto-Based Payment App
Flexa on Monday (May 13, 2019) launched a new digital payment network that uses cryptocurrencies to cut processing costs, eliminate fraud and preserve users' privacy.
Read Article
Schellman Approved to Provide APEC Certification as an Accountability Agent
Schellman adds APEC Certification to its suite of compliance services.
Recently, the Asia-Pacific member economies developed a privacy framework as a volunteer system that outlines...
Read Article
What are the most important use cases for Blockchain in the Pharmaceutical Industry?
(Article originally published in Rx Data News, Issue 5 Vol. 1)
Read Article
Newly Issued Fact Sheet on Direct Liability of Business Associates under HIPAA
On May 24th, The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) issued a fact sheet on direct liability of Business Associates under HIPAA. For reference,...
Read Article
2019 Cybersecurity Women On Capitol Hill Public/Private Symposium
I didn’t hesitate to accept when Schellman & Company asked if I would represent our team at the Executive Women’s Forum (EWF) Third Annual Cybersecurity Women on Capitol Hill...
Read Article
The Bright Side of Technology: Tech Hacks That Have Improved Society During This Fourth Industrial Revolution
Even when the developments might’ve been considered fairly primitive by modern standards, technological progress has always been a definitive characteristic of humanity. Like any new...
Read Article
EU Cybersecurity Act: What you need to know
What is it?
The EU Cybersecurity Act is the fruit of an initiative started by the European Parliament in 2017 with the goals of permanently establishing an agency to address...
Read Article
How to Build a Serverless Architecture
A serverless architecture can mean lower costs and greater agility, but you’ll still need to make a business case and consider factors like security and storage before migrating...
Read Article
