Under federal, state, regulatory, and contractual requirements, Michigan Tech is responsible for developing and implementing a comprehensive information security program. The purpose of this document ...

It’s one thing to establish a security program that meets the needs of your organization. It’s quite another to successfully embed the principles of that program into the very DNA of your organization ...

The Environmental Protection Agency's nine-year-old information security program, housed in the Office of Environmental Information, is staffed by 11 employees and a handful of contract support staff.

The Consumer Financial Protection Bureau got to experience what it’s like to go through an examination. The Office of Inspector General (OIG) within the Federal Reserve recently released findings and ...

An Information Security Policy is the cornerstone of an Information Security Program. It should reflect the organization’s objectives for security and the agreed upon management strategy for securing ...

Critical skills are necessary to make a successful Chief Information Security Officer (CISO). It is critically important that the CISO is tightly integrated with the organization’s mission. Focusing ...

The purpose of this policy is to define required access control measures to all University systems and applications to protect the privacy, security, and confidentiality of University information ...

With what seems like a never-ending stream of cybersecurity attacks, corporate boards and executives are searching for that “silver bullet” to protect them from the universe of threats. Unfortunately, ...

What's at stake: The CFPB uses outdated software and has no strategy for responding to cybersecurity risks, the report found. Supporting Data: The CFPB's information security program experienced a ...