.webp?width=2169&height=526&name=Compass%20regular%20transparent%20website%20(1).webp "Compass IT Compliance Logo")
-1.webp?width=2169&height=620&name=Compass%20regular%20transparent%20website%20smaller%20(1)-1.webp "Compass IT Compliance")
SolarWinds SUNBURST Hack – And You Thought 2020 Couldn’t Get Any Worse
by Danielle Corsa on December 18, 2020 at 2:45 PM
Co-authored by Derek Morris, Senior Information Technology Security Professional SUNBURST – add this to the list of all the wonders this year has brought. Are you one of the 18,000 customers infected by SUNBURST? Have you been ordered by the US Department of Homeland Security to quara …
Vendor Risk Management: Third-Party Risk Analysis / Annual Review
by Andrew Paull on October 8, 2020 at 2:00 PM
We live in a world where our interactions with each other are generally benign, observed to be candid at face value, making it easy to take the assurances of success, functionality, and capability of our colleagues and acquaintances as they are meant. Unfortunately, business interacti …
Blackbaud Breach – Time to Review Your Vendors
by Derek Boczenowski on July 29, 2020 at 1:00 PM
It has recently been reported that Blackbaud, one of the world’s largest providers of education administration, fundraising, and financial management software for nonprofits suffered a ransomware attack back in May of 2020.
Security Oversight with Managed Service Providers
by CJ Hurd on July 9, 2020 at 1:00 PM
The outsourcing of information technology (IT) functions has become incredibly common with businesses, especially among small and medium sized companies. There are many benefits to outsourcing IT. For one, the cost is normally much lower than hiring even a single employee to manage IT …
COVID-19: Is Management Asking the Right Questions?
by Jerry Hughes on April 24, 2020 at 4:00 PM
What if you are the owner or manager of a business in today’s world? A few weeks ago, our world was turned upside down – to say the least. Management’s focus shifted from business as usual to figuring out how to keep employees safe and company doors open for business (in-person or vir …
Vendor Risk Management: Information Security Responsibilities
by Andrew Paull on January 29, 2020 at 3:30 PM
Welcome back! This article serves as part two in my Vendor Risk Management blog series, continuing the discussion on some important factors of creating and renewing third-party contracts.