essence
-
ISO 27001, sometimes referred to as ISO/IEC 27001 is an international standard that addresses organizational information security. Issued in 2005 and with a second revision in 2013, the ISO 27001 standard describes the Information Security Management Systems requirements for global controls and safeguards meant to preserve data privacy, protect sensitive information, optimize the organizational cybersecurity…
-
On July 26, the U.S. Securities and Exchange Commission (SEC) fast-tracked approval of its cybersecurity disclosure rules for publicly traded companies focused on incident disclosure; cybersecurity risk management, strategy, and governance; and the involvement of boards of directors in cybersecurity programs. While many of us didn’t expect official rule adoption until October, the SEC surprised…