Topic: Information Security Archives

FTC Safeguards Rule breach notification under 314.4(j): the notification-event definition, deemed discovery, 500 consumers, 30 days, the 6…

FTC Safeguards Rule penalties: no fine in the Rule, section 5 orders with 20-year obligations, $53,088 per violation…

The Qualified Individual under 16 CFR 314.4(a): what the Rule requires, what qualified means, 3 ways to fill…

NIST CSF vs ISO 27001 on 5 differences: outcome framework vs certifiable system, Profiles vs certificate, scope, prescription,…

The SAMA Business Continuity Management Framework (2017): 9 principles, the control considerations that decide findings, annual BCP and…

CIS Controls ISO 27001 mapping: all 18 Controls to the 93 Annex A controls of ISO 27001:2022, where…

NIST 800-53 Rev 5 vs Rev 4: the 7 changes NIST lists, the new PT and SR families,…

NIST 800-53A Rev 5 explained: determination statements, the 3 methods (examine, interview, test), 4 object types, depth and…

NIST 800-53 overlays: the 800-53B definition, the 7 categories, baseline vs overlay vs tailoring, published overlays (SP 800-82,…

NIST 800-53 vs ISO 27001 on 5 differences: catalogue vs certifiable system, baseline vs risk assessment, granularity, assessment…

Cyber Essentials requirements v3.3: the 5 controls with numbers — 14-day patching, MFA on cloud, 12-character passwords, 10-attempt…

Cyber Essentials scope under v3.3: whole organisation vs sub-set, 12 device rules, the role-based BYOD table, cloud never…

Tag: Topic: Information Security