Blog
Getting Your Data Protocols CPRA-ready
Amidst the frenetic activity still going on with the presidential election, this week California passed Proposition 24, an important bill which will strengthen digital privacy…
Critical Gaps in the Data Access Threat Model
This blog, the third in a series on “Why you can’t stop data breaches”, details various attack methods used to compromise a set of common…
Risk Acceptance and Security Trade-offs: Managing Performance vs. Security
I recently read a note by someone discussing the futility of having engineers focus on performance cycles in order to optimize data encryption operations, and…
A DataSecOps Approach to Cloud Migration Is Not Negotiable
A recent study of CIOs offered good news for those concerned about cloud data protection. It reported that 86% of respondents are now viewing security…
Cloud misconfigurations: a surging, but overlooked threat to cloud data security
Enterprises continue to migrate their workloads to the cloud with the promise of lower costs, increased agility and greater flexibility. But cloud migration also brings…
Combining CCPA Compliant Data Utilization and Privacy
Today marks the first day the attorney general will enforce the CCPA or California Consumer Privacy Act, a milestone day for all of us, who,…
Are GDPR and Other Privacy Regulations Enough?
Two years ago, the General Data Protection Regulation (GDPR) was introduced and hailed as the most significant change in data privacy regulation in two decades….
Why data tokenization is insecure
(Why you can’t stop data breaches – Part II) This blog, the second in a series on “Why you can’t stop data breaches,” details various…
CCPA Compliance: Are Your Data Security Protocols CCPA-Ready?
On January 1, 2020, the California Consumer Privacy Act (CCPA) became operational, however, enforcement of privacy-related suits cannot be initiated until July 1. The regulation,…
Why you can’t stop data breaches – Part I
Data Breaches Over the past decade plus, we’ve seen a continued onslaught of data breaches via cyber-attacks, phishing scams, malware, ransomware, and other new cybercriminal activity. And there are no…