Compass IT Compliance Blog / Compliance (8)

Is BetterHelp a Scam? Unpacking The Truth

BetterHelp Therapist

Navigating mental health support has evolved with platforms like BetterHelp, a prominent online counseling service that links users with licensed therapists. Despite its mission to broaden access to mental health care, BetterHelp has faced scrutiny, especially following a controversy …

Read Story

What Is a SOC 2 Report and Who Needs One?

Who Needs a SOC 2?

In an era where data security and privacy are paramount, the SOC 2 report emerges as a critical tool for organizations that manage customer data. Tailored to ensure the safeguarding of information, a SOC 2 report not only enhances an organization's credibility but also solidifies its …

Read Story

New CJIS Requirements: What You Need to Know

CJIS Updates

In a recent Compass IT Compliance blog, we delved into the fundamentals of the Criminal Justice Information Services (CJIS) Security Policy (CSP), its applicability, and the criticality of CJIS Compliance, terminology, and the thirteen policy areas applicable at the time of that writi …

Read Story

Staying HIPAA Compliant While Leveraging Telehealth

Telehealth Doctor

In the rapidly evolving landscape of healthcare, telehealth has emerged as a pivotal technology, offering unprecedented convenience and accessibility to patients and providers alike. However, as healthcare organizations increasingly adopt these digital health services, the imperative …

Read Story

NIST Cybersecurity Framework 2.0 – Key Takeaways

United States Department of Commerce

Last week, the National Institute of Standards and Technology (NIST) unveiled the second version of its Cybersecurity Framework (CSF), marking the first major new updates to NIST CSF since the framework's inception ten years ago. Initiated by Executive Order 13636, the development of …

Read Story

Understanding the Key Differences Between IT Governance & Compliance

Governance and Compliance

In the dynamic landscape of business expansion and evolution, distinguishing between IT governance and compliance becomes not just beneficial, but essential. While both are pillars in safeguarding organizations against a myriad of risks, they differ in their core objectives, methodolo …

Read Story

Subscribe by email