Preparing for a BIA – Understanding RTO and RPO
by Donald Mills on February 16, 2023 at 1:00 PM
In my time as a security and compliance auditor and virtual CISO, I have reviewed countless business continuity plans (BCPs) resulting from regulatory and industry requirements to which clients must adhere. For the most part, the business continuity plans I have reviewed were written …
Risk Management – Everyone Needs a Seat at the Table
by Donald Mills on March 17, 2022 at 1:00 PM
In the security world there’s a common saying that compliance isn’t security and security isn’t compliance. I believe what gets missed in this saying is the role proper risk assessments and risk management play in marrying up security and compliance.
PCI, Service Providers, and You
by Donald Mills on August 19, 2021 at 3:30 PM
As merchants increasingly utilize trusted partners to maintain and manage critical pieces of their business, information technology, and security infrastructure, it becomes necessary to build a program to manage these vendors.