Blog Archive - Planet 9 Inc.

Developing Information Security Policy

Information security policy plays a vital role in protecting data confidentiality, integrity, and availability. Learn how to develop your policy.

GLBA Updates Reminder

#cybersecurity❙
#glba

The GLBA updates become effective in December. Make sure you’ve revised your policies and procedures to comply with new requirements.

CCPA Showed its Teeth. $1.2 Million Fine for Selling Callifornians’ Data

#ccpa❙
#privacy

A beauty retailer pays $1.2 million fine for CCPA violation. It’s all about using third-party analytics on its website. Learn more with us.

CISA and FBI Warn on Zeppelin Ransomware

Federal agencies warn on tactics, techniques, and procedures used by Zeppelin ransomware actors

Congress Released ADPPA – Draft Federal Privacy Law

#ADPPA❙
#privacy

ADPPA would enact a unified federal privacy law governing the use of citizens’ personal information. Learn what it means for your business

CIRCIA: Critical Infrastructure Now to Report Cyber Incidents and Ransom Payments

CIRCIA requires critical infrastructure organizations to report substantial cyber incidents and ransom payments. Read more about the new law

DoD Memorandum Reminds Contractors to Protect CUI

Significant material and reputational risks threaten contractors that have not implemented NIST SP 800-171, as the DoD memorandum states.

Supply Chain Attacks in Healthcare. The Case of Shields, Eye Care Leaders, and MCG Health

Data breach reports prove the evolving trend of supply chain attacks in healthcare. Determine who is more responsible for third-party data incidents

HIPAA Compliance for Start-Ups: Debunked Misconceptions

#healthcare❙
#hipaa

Small businesses are often led by misconceptions when it comes to HIPAA. Our free e-book can help with proper HIPAA compliance for start-ups.

2022 RSAС: Key Takeaways

#cybersecurity❙
#RSAC

Every year the RSAC keynote speakers bring their unique insights on the future of cybersecurity. Learn what’s new in 2022 RSAC

Reinforcing the Weakest Security Link with Access Controls

Weak human firewalls force businesses to adopt advanced access controls. Read our blog to get familiar with access controls that mitigate some of the risks associated with human factors.

Building a Successful Zero Trust Strategy

#cybersecurity

The complexity of the modern cybersecurity landscape is calling for new defense approaches. Learn about zero trust, its main principles, and its mechanisms

Recent Healthcare Data Breaches. The Importance of Sharing Experience

Healthcare data breaches may give valuable lessons on how to address cyberthreats, yet their details are rarely made public. Learn why sharing the incident experience is crucial for healthcare

UCPA: the Most Business-Friendly Privacy Law

#ccpa❙
#privacy

The Utah Consumer Privacy Act (UCPA) is considered the most business-friendly state privacy law yet. Learn about the main facets of the law to be ready to comply in the future

Exploring New Attack Approaches. The Case of Microsoft and Okta

Microsoft and Okta suffered data breaches after a cybercrime group declared them as targets. Learn how the unique attack approach contributed to compromising the tech giants.

Applying PIPEDA for U.S.-Based Organizations

PIPEDA is the Canadian privacy law for private-sector businesses. Learn how it affects U.S.-Based companies doing business with Canada.

The State of Ransomware in 2022

#cybercrime❙
#ransomware

Ransomware shows no signs of slowing down while its business model has changed. Read more about the state of ransomware in 2022.

Security Awareness Training. Important Things to Know

#security awareness

Digital dependency prompts businesses to strengthen their technological defenses. Learn how security awareness training helps reduce cybersecurity risks.

Cyberthreats and National Security

#national security

Practically all businesses are vulnerable to cyberthreats, and national security is not an exclusion. Learn how this tendency affects the decision-making process in national and business environments.

Mobile Device Security

Learn about best practices that will enhance mobile device security and enable businesses to provide their employees with secure access to corporate resources

You’ve Been Breached. What to Do?

A data breach may be detrimental for businesses but much depends on their response. Learn how to react quickly and decisively if you’ve been breached.

All You Need to Know About GLBA Compliance in Higher Education

#education❙
#glba

Cyberattacks plague colleges and universities. Learn why GLBA compliance in higher education institutions is important.

Supply Chain Attacks and Cybersecurity

Supply chain attacks are on the rise. Learn how to align security efforts within your supply chain to reach a more desirable level of cyber protection.

Reviewing the 2021 Healthcare Data Breaches

The year 2021 appeared challenging, given the number and severity of healthcare data breaches. Review some of the most severe incidents and get key takeaways of the past year.

2022 Cybersecurity Trends

#cybercrime

Cybercriminals are getting more motivated, organized, and sophisticated in executing attacks. Read our blog to learn about 2022 cybersecurity trends.

SOC 2 + HIPAA: Combining Two Audits

HIPAA is one of the most frequently demanded subject matters for SOC 2 audits. Learn more about the main peculiarities of the SOC 2 + HIPAA.

SOC 2: Specific Criteria for Controls Evaluation

#audit❙
#soc2

The Security category is imperative for all SOC 2 engagements; but what if your commitments to customers and services demand including other criteria?

SOC 2: Common Criteria for Controls Evaluation

#audit❙
#soc2

Every SOC 2 audit encompasses from one to five categories while Security is a must-have. Learn more about how the Security-related controls are evaluated.

Fall 2021: Summary of Healthcare Data Breaches

Fall 2021 showed a slight increase in reported healthcare data breaches. Acquire the main tendencies, channels, and locations of cyberthreats.

PIA vs. DPIA: the Purpose and Requirements

#gdpr❙
#privacy

Organizations that fall under the EU’s GDPR may be required to perform DPIA. Learn more about the requirement and how it differs from the PIA.

vCISO: a Solution for Small Businesses

#ciso❙
#vciso

Small organizations often lack a dedicated leader to manage their security and compliance needs. Learn how vCISO can help.

FedRAMP: Core Things to Know About the Program

FedRAMP Authorization is the main prerequisite to offering cloud services to the U.S. government. Learn more about the authorization requirements.

Cyber Incident Reporting on Critical Infrastructure

#cybercrime

Following SolarWinds & Colonial Hacks, security officials Introduced draft legislation on cyber incident reporting. Learn how it may affect your organization

#BeCyberSmart: Common Tips to Fight Against Phishing

#cybercrime

One of the primary 2021 Cybersecurity Awareness Month’s focuses is resisting the phishing threat. Read how to fight against phishing and #BeCyberSmart!

Getting Ready for SOC 2 Audit: Where to Start?

#audit❙
#soc2

SOC 2 is becoming a synonym for a reliable service provider. Learn how to prepare your organization for the SOC 2 audit and get a favorable audit opinion.

CCPA vs. CPRA: Upcoming Changes to the Law

Discover what updates CPRA will bring to CCPA’s data privacy requirements and realize their implications for your organization.

Ensuring Business Continuity at the Time of Disasters

#business continuity

Disasters may be detrimental to organizations that don’t have an emergency plan. Planet 9 advises on how to ensure business continuity during a disaster.

Data Security in Context of CCPA Compliance

#ccpa❙
#privacy

CCPA grants Californian consumers privacy rights while imposing obligations on businesses. Learn how to meet these obligations and achieve CCPA compliance.

Core Aspects of California Consumer Privacy Act (CCPA)

#ccpa❙
#privacy

A detailed overview of the California Consumer Privacy Act (CCPA) and its requirements for data privacy. Learn how to work with consumers’ data in California.

Unscrambling Confusion Around CUI Protection Requirements

#cmmc❙
#nist

Protection of CUI requires a stable and complicated regulatory environment. Get a sense of the set of standards, requirements, and regulations around it.

Digitalization in Healthcare: Opportunities and Challenges

#healthcare

Digitalization has breathed new life into qualitative healthcare service delivery, yet the reverse side exists. Explore both the opportunities and challenges with Planet 9.

Roadmap for Ransomware Protection

#cybercrime❙
#ransomware

General guidelines that would help your organization to prepare, prevent, and protect from potential ransomware incidents.

A Guide to Conducting NIST SP 800-171 Self-Assessments

All DoD contractors that work with CUI must perform a self-assessment for compliance with NIST SP 800-171. Learn what the assessment process entails.

NIST SP 800-171: Key Reasons for Maintaining the Standard

Non-federal contractors that handle CUI are bound to comply with NIST SP 800-171, as the Interim Rule requires. Learn more about why compliance matters.

Ransomware Hits Critical Infrastructure: a Case of Colonial

A simple explanation of why the ransomware attack on the Colonial Pipeline Company is such a big deal for the U.S. critical infrastructure

CMMC Compliance: a Guide for DoD Contractors

#cmmc❙
#nist

The Cybersecurity Maturity Model Certification (CMMC) for DoD Contractors is on the rise. Learn more about the CMMC framework and its compliance requirements.

HIPAA Compliance Evaluation for Responding to Security-Related Changes

#healthcare❙
#hipaa

HIPAA compliance requires a continuous and thorough evaluation of organizations’ capability to comply with the requirements and address changes. Learn how HIPAA Vitals may help.

Risk Assessment Under HIPAA Security Rule

A step-by-step risk assessment process for HIPAA Security Rule Compliance. Stay protected against risks and hazards to ePHI security.

HIPAA Security Rule: Implementing Safeguards to Protect ePHI

#healthcare❙
#hipaa

The HIPAA Security Rule requires administrative, physical, and technical safeguards for ePHI protection. Inquire about their implementation specifications.

Best Practices for Maintaining Data Security in Cloud

#cloud security

Maintaining data security in clouds is becoming more challenging. Discover how organizations’ best practices and security tools may help.