Latest Articles
How to Meet the Requirements of ISO 27001 A.18.1.1
Discover the importance of complying with mandatory requirements such as laws, regulations, and contractual obligations.
Sep 11, 2025
Compliance
ISO 27001: How to Communicate with Interested Parties
Understanding your stakeholders needs and expectations is paramount to implementing an ISO 27001 compliant information security management system (ISMS)
Sep 10, 2025
Compliance
ISO 27001: How to Establish Scope and Create a SoA
Establishing the scope of your ISMS and creating the Statement of Applicability is critical to implementing an ISO 27001 compliant program.
Sep 10, 2025
Compliance
ISO 27001 Implementation & Leadership Support
Leadership's engagement in the implementation of ISO 27001 can determine the success of your ISMS. Develop and nurture a risk-conscious culture with ISO 27001 c...
Sep 8, 2025
Compliance
How to Maintain ISO 27001 Certification
Explore what happens after ISO 27001 certification and how you can take your ISMS to the next level, as well as how to maintain certification.
Sep 8, 2025
Compliance
Why MSPs Should Offer Compliance and Risk Management Services
The dynamic nature of today's business environment means that Managed Service Providers (MSPs) are proactive in their approach towards cyber security.
Sep 5, 2025
Compliance
Understanding the Purpose of ISO 27001's Annex A Controls
Annex A of ISO 27001 provides companies with a structured checklist to define controls, manage their ISMS and mitigate cyber-related risks.
Sep 4, 2025
Compliance
ISO 27001 Security Awareness Training Requirements & Best Practices
Security training and awareness provides formal cybersecurity education to the workforce and ensure's effective deployment of controls.
Aug 29, 2025
Compliance
ISO 27001: Monitoring Efficacy and Continuous Improvement
Demonstrating the continuous improvement of your ISMS is not only a requirement, but a huge advantage to having an ISO 27001 certified system.
Aug 28, 2025
Compliance
How GDPR Affects Your Organization
Learn why General Data Protection Regulation (GDPR) is a game-changer for businesses that process or control personal data of EU citizens.
Aug 21, 2025
Compliance
Key Stakeholders in the FedRAMP Process
Learn how FedRAMP works, who the top stakeholders are, and how you can achieve a FedRAMP compliant security package as a federal agency CSP.
Aug 20, 2025
Compliance
What is Continuous Compliance?
Discover the difference between continuous compliance and traditional compliance methods, and how continuous compliance is becoming an essential strategy for mo...
Aug 19, 2025
Compliance
SOC 2 Type 1 vs. Type 2: Which One is Right for You?
This article breaks down the different types of SOC reports, the benefits of SOC 2 type 1 and type 2, and understanding which one you need.
Aug 19, 2025
Compliance
SOC 1, SOC 2, or SOC 3: How to Choose the Right Report
An audit of your controls and risk associated with an outsourced service, a SOC report can be highly insightful - determine which report applies to you.
Aug 19, 2025
Compliance
Everything You Need To Know About The ISO 27001:2022 Update
This article will cover the main changes in the mandatory clauses, Annex A, and how to transition to this new ISO 27001:2022 update.
Aug 7, 2025
Compliance
Understanding the Relationship Between NIST CSF and ISO 27001
Learn about the similarities, differences, and integration opportunities between NIST CSF and ISO 27001 to choose the right path or combine both for stronger se...
Jul 23, 2025
Compliance
How to Leverage your GRC Platform for SOC 2 Compliance
Learn how toleverage your GRC platform, inclsuing how to use automation, for faster, more efficient SOC 2 compliance.
Jul 23, 2025
Compliance
Using SharePoint for Compliance Management
SharePoint is a great platform for collaborating and information sharing, but can it be used efficiently as a compliance management program?
Jul 3, 2025
Compliance
Why the System Security Plan (SSP) is Critical for FedRAMP Compliance
Learn about the importance of the FedRAMP SSP report for cloud service providers (CSPs) - what this report is and the benefits it offers.
Jul 3, 2025
Compliance
Information Security Compliance and Blockchain
As blockchain technology bleeds into everyday life, companies have started to recognize the potential for growth tied to information security compliance.
Jun 12, 2025
Compliance
Improving Security With User Access Reviews
Giving all employees the same level of access is unnecessary and even hazardous. Minimize the attack space and collateral damage with user access reviews.
Jun 12, 2025
Compliance
Cost of PCI DSS Compliance
The cost of PCI-DSS compliance can vary widely from one organization to another. Learn about the contributing factors and how to manage compliance.
Jun 12, 2025
Compliance
CCPA vs. GDPR: Key Differences and Compliance Requirements
Discover the similarities and differences between GDPR and CCPA regulations and find out how to comply with them.
Jun 12, 2025
Compliance
Why Use Standard Agnostic Controls in Your Compliance Program
Learn how standard-agnostic controls simplify compliance across multiple frameworks. Streamline your GRC program by implementing standard controls in GRC that r...
Jun 12, 2025
Compliance
Information Security Compliance in Canada
The Canadian government has taken various initiatives to further enhance information security and compliance to mitigate potentially devastating cyber-risk.
Jun 11, 2025
Compliance
ISO 27000 Series of Standards: Everything You Need to Know
Explore the essentials of the ISO/IEC 27000 series. Learn about its benefits and challenges and how to apply it to your organization.
Jun 5, 2025
Compliance
The EU AI Act Explained
The European Union has introduced new legislation on artificial intelligence: The EU AI Act. Discover everything you need to know about it and how your organiza...
May 26, 2025
Compliance
How Control Maturity Impacts Your Information Security Compliance
Control maturity can help align your information security priorities to meet your compliance goals. Know where you're compliant and what needs improvement.
May 23, 2025
Compliance
How HIPAA, HITRUST CSF, and NIST CSF Boost Cybersecurity in Healthcare
This simplified guide will help you understand how HIPAA, HITRUST CSF and NIST CSF work together in data security.
May 7, 2025
Compliance
Key Differences between ISO 42001 and NIST AI RMF
This article looks at the key distinctions between ISO 42001 and NIST AI RMF, their practical applications, and how to determine the right framework for your or...
Apr 24, 2025
Compliance
Have you Evaluated the ISO 27001 Statement of Applicability?
Learn why classifying the ISO 27001 Statement of Applicability (SOA) as public could be detrimental to your ISMS security.
Apr 24, 2025
Compliance
NIST SP 800-53 Rev. 5 and FedRAMP: A Comprehensive Guide
Learn exactly what you need to know about the NIST SP 800-53 Rev. 5 (latest update) and how it relates to FedRAMP and FISMA.
Apr 11, 2025
Compliance
Mastering NIST CSF 2.0 Framework Update - A Comprehensive Guide
Explore the benefits of adopting NIST CSF 2.0 for your organization. Learn essential updates, compliance strategies, and much more.
Apr 11, 2025
Compliance
What is the NIST AI Risk Management Framework (AI RMF)?
Learn about the NIST AI Risk Management Framework, its key features, business value, and implementation strategies.
Apr 8, 2025
Compliance
Learn the foundations of IT General Controls, what they are, and how to ensure your organization has the right ITGCs in place.
Apr 1, 2025
Compliance
Understand the essentials of HIPAA Security Rule compliance in healthcare, from AI integration challenges to safeguarding patient data.
Apr 1, 2025
Compliance
Explore and learn about the critical choice between out-of-the-box and integrated GRC platforms for your organization's compliance needs.
Mar 31, 2025
Compliance
PCI DSS Version 3.2.1: 3.2 Got a Makeover
Learn about the latest update to the PCI DSS version 3.2.1 and how it affects your organization's processing or transmitting cardholder data.
Mar 31, 2025
Compliance
ISO 27001 - Mandatory Clauses
Satisfying ISO 27001's Mandatory Clauses is, well required to implement a compliant system. Learn about how each clause contributes to your ISMS, and download t...
Mar 27, 2025
Compliance
Difference between FISMA vs FedRAMP Compliance
This article explains the FISMA compliance process, the benefits of obtaining its certification, and the differences between FedRAMP & FISMA.
Mar 10, 2025
Compliance
Understanding the Differences Between FedRAMP Impact Levels
FedRAMP impact levels range from Low, Moderate, and High, and are based on the type of data in your system and how it maps in the FIPS PUB 199 worksheet.
Mar 10, 2025
Compliance
What is OSCAL?
Learn how OSCAL is transforming the way organizations approach compliance, the benefits, and how it standardizes compliance data.
Jan 31, 2025
Compliance
How to Achieve NIS2 Directive Compliance
Discover how to achieve NIS2 Directive complaince, and understand how GRC solutions like StandardFusion can help.
Jan 21, 2025
Compliance
What is the Digital Operational Resilience Act (DORA)?
Understand what DORA's scope is, who it affects, how to access current orgnaizational practices, and how to achieve compliance.
Jan 15, 2025
Compliance
Managing Multiple Compliance Frameworks Efficiently
Discover how to better manage multiple compliance frameworks more efficienctly by using dedicated GRC platforms and common controls.
Jan 2, 2025
Compliance
PCI DSS v4.0 Compliance - Everything You Need to Know
The updated PCI DSS v4.0 becomes a compliance requirement by March 31, 2025. Discover what changes we made and how to be compliant.
Sep 18, 2024
Compliance
Data Compliance: Everything You Need to Know
Data compliance refers to the practice of managing and protecting sensitive/relevant data according to established regulations & standards.
Jun 19, 2024
Compliance
Compliance Management System: The Ultimate Guide
Learn about the essential elements, benefits, and strategic implementation steps for an effective compliance management system.
May 17, 2024
Compliance
NIS 2.0 Directive: Key Changes and Deadlines
Discover the key changes in the NIS 2.0 Directive, including scope and applicability, geographical reach, penalties and implementation!
May 3, 2024
Compliance
Learn when is the optimal timing for compliance automation to maximize efficiency and alignment with your organizational goals.
Feb 6, 2024
Compliance
In this article, we'll unveil the scope of work for organizations willing to kick off Compliance Automation Projects. Learning the what.
Dec 16, 2023
Compliance
Compliance Automation: The Key to Simplified and Effective GRC
Discover how Compliance Automation is transforming GRC. Uncover its role in enhancing efficiency, reducing costs, and simplifying compliance.
Nov 17, 2023
Compliance
Explore KPIs and KRIs' pivotal roles, and fortify your organization's compliance and data governance with ease and efficiency!
Nov 1, 2023
Compliance
Streamline your compliance efforts with structured compliance documents. Achieve clarity, efficiency, and accountability.
Oct 4, 2023
Compliance
SOC 2 Compliance: Building Trust and Confidence With Customers
Learn how SOC 2 compliance can improve your business's security posture and safeguard customer information. Checklist included!
Mar 2, 2023
Compliance
ISO 27018: 2019 Revision
A revision to ISO 27018 was published last year - what do you need to know about this revision, and do you need to be ISO 27018 compliant?
Mar 20, 2020
Compliance
What is Security Program as a Service (SPaaS)?
StandardFusion and Mirai Security have partnered together to provide a Security Program as a Service. Learn more about this exciting news.
Mar 6, 2019
Compliance
How to Manage the 2016 SOC 2 Content Update
Learn about the SOC 2 Content Update for Trust Services Principles (TSP) released by the American Institute of Certified Public Accountants.
Feb 23, 2017
Compliance
Why Developers Fear ISO 27001 and How to Overcome It
With some adjustments to your plan, even the most resistant team members can realize the benefits of implementing ISO and likely come around.
Nov 1, 2016
Compliance
