Compliance Does Not Equal Cybersecurity

HIPAA, GDPR, PCI, CIS, NIST.  Does any of those acronyms sound familiar? Chances are, you’ve heard of several and have a general understanding of what they’re all about. For those that don't, these are examples of regulatory compliance frameworks, and their aim is to provide policies and processes for security controls and best practices so that organizations can more effectively minimize security risks and privacy threats.

The ideas within these frameworks are so important that they’re often required by central …

aim best practices cis compliance compliance frameworks controls cybersecurity don effectively frameworks gdpr general hipaa ideas important nist organizations pci policies practices privacy processes regulatory regulatory compliance risks security security controls security risks sound threats understanding