This Written Information Security Program describes the safeguards implemented by DePauw University to protect confidential data. The goal of the program is to ensure the security of these assets to ...

The Internal Revenue Service’s cybersecurity program was found to be “not effective” for fiscal year 2026, according to a warning from the agency’s watchdog, potentially leaving taxpayer data ...

A risk-based approach to cybersecurity using a set of desired outcomes. A methodology that any organization can use to develop and maintain a comprehensive information security program as risks evolve ...

Third-party risk management frameworks address a problem that keeps getting bigger. According to the World Economic Forum’s Global Cybersecurity Outlook, 54% of large organizations identify supply ...

Every organization, regardless of size or the revenue it generates, needs a security program. According to a recent International Data Corporation (IDC) report, "By 2027, the average enterprise will ...

The purpose of this policy is to assist the organization in its efforts to fulfill its fiduciary responsibilities relating to the protection of information assets and comply with regulatory and ...

A lot of the work I do, especially for clients regulated by the Department of Labor (DOL), involves third-party risk reviews. In 2021, the DOL released a list of cybersecurity best practices. Now, in ...

The University at Buffalo Information Technology Office (UBIT)’s Information Security Program addresses the full range of information security issues that affect the university, and establishes a ...