This guide contains everything you need to know about conducting an information security risk assessment questionnaire at your organization.
Howdy Friend! Welcome back to the InfoSec GRC Brief from SaltyCloud, your go-to source for curated insights on governance, risk, and compliance in...
Plus, NIST finalizes IR 8587, CISA and FBI publish joint critical infrastructure fact sheet, and the CIRCIA final rule slips past its September target.
Plus, the DoD codifies its CMMC Phase 2 suspension, IDScan breach exposes 153M driver's license scans, and NYDFS risk assessment guidance.
Regulatory & Compliance Updates: New rules, moving deadlines, and enforcement actions on CMMC, HIPAA, the EU AI Act, NIS2, CIRCIA, NIST releases, and more.
GRC Strategies: How GRC programs actually run across board reporting, AI governance, and third-party risk, plus the benchmarks worth knowing.
Cyber Incidents & Risk Implications: Breaches, ransomware, CISA KEV additions, and which controls to change.
SaltyCloud Research: Original guides and analysis on NIST CSF, 800-53, CMMC, GLBA, HIPAA, and more, all from the SaltyCloud team.
Howdy Friend! Welcome back to the InfoSec GRC Brief from SaltyCloud, your go-to source for curated insights on governance, risk, and compliance in...
Plus, NIST finalizes IR 8587, CISA and FBI publish joint critical infrastructure fact sheet, and the CIRCIA final rule slips past its September target.
Plus, the DoD codifies its CMMC Phase 2 suspension, IDScan breach exposes 153M driver's license scans, and NYDFS risk assessment guidance.
Plus, inconsistent CUI markings inflate CMMC scope, CareCloud breach impacts 3.7M patients, and NIST SP 1353, an AI quick-start for CSF 2.0.
Plus, California's new DROP deletion platform, EU AI Act transparency enforcement begins, and White House-authorized private hacking.
Plus, a $2.25M FTC fine over FCRA failures, high-risk EU AI Act deadlines deferred to 2027, and GAO on FAA and TSA aviation cyber gaps.