FEHA’s Post

Happy Monday! 🔆 Looking to expand your knowledge of PCI DSS? Look no further! 🔍 I will soon be sharing a mini-course on this important topic. I have been urged to share my knowledge with a larger audience. A sample will be posted here on LinkedIn for everyone to enjoy. If you find it helpful, a full course will be available as well. 📚 The goal of this course is not to compete with others, but to simplify an important topic for everyone. Stay tuned for more details and get ready to enhance your understanding of PCI DSS! 🎓 #PCIDSS #PCI #Compliance #Cybersecurity

Last month I posted the 20 most significant complaints businesses have with their consultants, and a remedy for each. I have now compiled that into a workbook for classroom study on vendor management. I would like to share a digital copy of it with anyone who would like to have it. My only ask is to let me know your thoughts on how I can improve upon it. Just reply to this post with a request to DM or email you a QR code to download your copy. Thanks in advance for helping me help everyone solve problems. #ThePhilTurSays #Ce58 #ce58cyber #cybersecurityconsulting #cybersecurity #riskmangement #vendormanagement #riskassessment #compliance #privacy

ISO 27001 certification develops a security culture and mindset that can have long-term benefits for your organization. It also provides a standard set of best practices for your people to follow. In this video, learn how implementing the standard can lead to a variety of security benefits for your organization. https://lnkd.in/gxPKCz42 #ISO27001 #ISMS #Security #Privacy #Cybersecurity

ISO 27001 certification develops a security culture and mindset that can have long-term benefits for your organization. It also provides a standard set of best practices for your people to follow. In this video, learn how implementing the standard can lead to a variety of security benefits for your organization. https://lnkd.in/gxPKCz42 #ISO27001 #ISMS #Security #Privacy #Cybersecurity

If you are an FSP needing to be compliant with Joint Standard 1 of 2023 please reach out, or ask your Compliance Officer to contact us, to hear how Clasp can help you with technical solutions, templates, a project plan, report card and more to make that process easier. #FSCA #JointStandard1 #CyberSecurity #ITGovernanceRiskManagement #Compliance

🚨 Just been reading an article about PCI, and it keeps referring to the “PCI Audit.” It got me thinking… I know there are different terms used in the industry, and people often have their preferences. So, I’m curious — what do you prefer? Audit or Assessment? 🤔 For me it’s an assessment! Let’s hear your thoughts and why you lean towards one term over the other. Is there a difference in your experience, or is it just a matter of wording? #PCI #AuditVsAssessment #CyberSecurity #Compliance #IndustryInsights

ISO 27001 certification develops a security culture and mindset that can have long-term benefits for your organization. It also provides a standard set of best practices for your people to follow. In this video, learn how implementing the standard can lead to a variety of security benefits for your organization. https://lnkd.in/gxPKCz42 #ISO27001 #ISMS #Security #Privacy #Cybersecurity

ISO 27001:2022 Information #Security, #Cybersecurity, and #Privacy Self Assessment Checklist

Now that we have completed our first PCI DSS 4.0 assessment (see here for some interesting conversation on assessment vs audit https://lnkd.in/emdRq9KM ) its got me thinking and Requirement 12 (12.8/12.9) and due diligence around Attestations of Compliance (AoC's). We deal with about 20 providers and whilst some of them are great at providing AoC's to us, others have been and are really painful to deal with. I've had NDA hoops to jump through, been given certificates that are produced by QSA companies and, been told they don't have one they can share! None of this helps ensure that where we send Cardholder data is safe. What are other peoples experiences with trying to due their due diligence, and do you think it will get any easier with the new requirement in version 4 to support customers? One a final note if any of our customers needs our AoC for their due diligence its here for you: https://lnkd.in/e75pZa6Y Nice and easy, no need to even contact us!

🛡 Your information has different security needs depending on how sensitive the data is, and its importance to your organisation. 🗂 ISO27001:2022 Annex A 5.12 - Classification of Information sets out the requirements for how your organisation should categorise its data to assess potential risks and remain secure. 🌐 Find out about the latest changes for this control in the 2022 standard and what this means for your organisation's certification. Read more below 👇  https://lnkd.in/e6dgtuDR #cybersecurity #iso27001 #compliance #informationsecurity