Compliance and security

A discussion on supply chain security, including major past incidents, common attack scenarios, organizational risks, frameworks, and best practices.

Subscribe
Real people, real offices. Female developer coding at her desk. Featured image for Protecting your organization against password spray attacks

Protecting your organization against password spray attacks

If your users sign in with guessable passwords, you may be at risk of a password spray attack.
Read more Protecting your organization against password spray attacks
Electrical Tower Featured image for NERC CIP Compliance in Azure vs. Azure Government cloud

NERC CIP Compliance in Azure vs. Azure Government cloud

North American Electric Reliability Corporation—Critical Infrastructure Protection (NERC CIP) Compliance options in Azure public cloud and Azure Government.
Read more NERC CIP Compliance in Azure vs. Azure Government cloud
Featured image for Guarding against supply chain attacks—Part 2: Hardware risks

Guarding against supply chain attacks—Part 2: Hardware risks

Part 2 examines the hardware supply chain, its vulnerabilities, how you can protect yourself, and Microsoft’s role in reducing hardware-based attacks.
Read more Guarding against supply chain attacks—Part 2: Hardware risks
Person working on laptop Featured image for Data privacy is about more than compliance—it’s about being a good world citizen

Data privacy is about more than compliance—it’s about being a good world citizen

Data Privacy Day is a great time to assess your company privacy policies to ensure you comply with local and regional regulations.
Read more Data privacy is about more than compliance—it’s about being a good world citizen
Featured image for Council of EU Law Enforcement Protocol improves cross-border cooperation

Council of EU Law Enforcement Protocol improves cross-border cooperation

The new EU Law Enforcement Emergency Response Protocol addresses the growing problem of planning and coordinating between governments, agencies, and companies when cyberattacks occur across international boundaries.
Read more Council of EU Law Enforcement Protocol improves cross-border cooperation
Featured image for UK launches cyberstrategy with long-term relevance

UK launches cyberstrategy with long-term relevance

Read a review of the “National Cyber Security Strategy: 2016-2021,” the most frequently referenced document in cybersecurity discussions. Learn three ways that the security strategy can expand and thrive and why it’s important to revisit it to help secure your digital transformation.
Read more UK launches cyberstrategy with long-term relevance
Image of a banking professional shaking hands with a customer. Featured image for 5 steps financial institutions can take to reduce their cybercrime risk

5 steps financial institutions can take to reduce their cybercrime risk

Increasingly financial institutions are concerned about their cybersecurity risk. Here are five recommendations can help them more effectively manage that risk.
Read more 5 steps financial institutions can take to reduce their cybercrime risk
Why the Pipeline Cybersecurity Initiative is a critical step Featured image for Why the Pipeline Cybersecurity Initiative is a critical step

Why the Pipeline Cybersecurity Initiative is a critical step

Working together with government to push a more coordinated effort around infrastructure security—particularly pipelines and utilities—is critical. The new Pipeline Cybersecurity Initiative will help ensure that additional resources, information-sharing, and coordination will help mitigate additional cyber-related risks against the U.S. energy industry in the coming years.
Read more Why the Pipeline Cybersecurity Initiative is a critical step

The challenges of adopting a consistent cybersecurity framework in the insurance industry

How the U.S. insurance industry is aligning behind a cybersecurity framework in a fragmented, state-by-state, regulatory environment.
Read more The challenges of adopting a consistent cybersecurity framework in the insurance industry