Cloud Vendor Management for Small Businesses: Five Tips for Your RFP Process
If you do not have a procurement department taking care of the Request for Proposal (RFP) process for you, and especially if cloud-based providers are new to you, here are some tips for planning for the RFP process. (Planning is important; remember the carpenters’ creed: “measure twice, cut once.”) Recognize
How is Artificial Intelligence Changing the Supply Chain?
In the last few years, artificial intelligence (AI) has played an important role in reshaping supply chain norms and standards. Soon, businesses will be required to implement machine learning technologies if they want to remain competitive. At the turn of the century, when machine learning first entered the business world,
SOC Reports and PCI: Better Together
Benefits of Adding a SOC report to your annual PCI audit (or vice versa): For companies undergoing the PCI DSS reporting process (Payment Card Industry Data Security Standards), it can make a lot of sense to add a SOC (Service and Organization Controls) report from the
HITRUST Common Security Framework Compliance – more than just HIPAA
As Barnes Dennig added another CCSFP this month, we wanted to reflect on the evolution of the Common Security Framework. Although the HITRUST Alliance was started by a consortium of healthcare industry leaders, the Common Security Framework (CSF) continues to address a number of criteria beyond HIPAA. It will be
NIST Risk Management Framework 2.0: What you Need to Know
The National Institute of Standards and Technology (NIST) recently released version 2.0 of its Risk Management Framework (RMF). The RMF addresses security, privacy, and supply chain risk in an integrated manner. One of the significant additions to the RMF is a step called Prepare. Prepare is intended to help organizations