Setting up an efficient Vendor Risk Management Program
In our first Insight Session, our Senior Product Manager Lisa Baldacchino will talk you through the practices on how to set up and optimize your vendor risk management program.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Getting started with Attack Surface Management
In our third Insight Session, our VP of BreachSight Greg Pollock will talk through how to get started with an Attack Surface Management Program, understand what it means to protect your attack surface, why you should invest in it, and the steps to take that will quickly show a return on investment.
Improving vendor relationships through better collaboration
In our second Insight Session, our Senior Product Manager Jess Hooper will teach you how to improve your vendor relationships by shifting your processes from reactive to proactive,using UpGuard’s powerful suite of vendor tools.
UpGuard Summit March 2023 North America Simulcast
This is a simulcast of the UpGuard Summit March 2023 North America event. The live panel will be sent to attendees via the email they registered with. Interested in finding out more about UpGuard?
What is the Digital India Act? India's Newest Digital Law
The upcoming Digital India Act (or Digital India Bill) is expected to be India’s newest legislation and legal framework for regulating the country’s online environment and digital data protection policies. The Digital India Act will fully replace the current Information Technology Act (IT Act) of 2000 by early 2023, which has faced criticisms for its outdated policies and inadequacies in dealing with modern-day technological issues.
What is CIRCIA? How This Law May Affect Your Business
The Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) of 2022 is a US federal law that requires all critical infrastructure entities to report any cybersecurity incidents or ransomware attacks to the Cybersecurity and Infrastructure Security Agency (CISA) within a specified timeframe.
FERPA Compliance Guide (Updated 2023)
FERPA (the Family Educational Rights and Privacy Act) is a United States federal law protecting the privacy of student education records, more specifically governing access from public entities, such as employers, public schools, and foreign governments.
Most Common HECVAT Violations (And How to Avoid Them)
The HECVAT (Higher Education Community Vendor Assessment Toolkit) was developed by the Higher Education Information Security Council (HEISC) as an initiative to help higher education institutions better protect their data, prevent the risk of data breaches, and measure the cyber risk of third-party solution providers.
How to Measure Cyber Risks in Healthcare
Cyber risks are prevalent in all healthcare institutions, and understanding how to mitigate those risks is especially important in today’s cyber landscape. Cyber risk is the sum of all IT risks that can potentially lead to the loss or exposure of critical data, financial damages, reputational damages, and operational stoppages due to a data breach or data leak. Measuring cyber risks involves determining the likelihood and impact of each cyber threat.
Why is Cyber Incident Reporting Important?
Because cyber threats continue to grow in sophistication and effectiveness, cyber incident reporting is not only important but also necessary for other organizations to learn from and prevent making the same mistakes. Many governing bodies and federal governments around the world have begun to require cyber incident reporting to document the type of attacks used, the source of the attacks, and how the attacks occurred to better understand the threat landscape.