What is the point of a company spending significant money and effort on Governance, Risk & Compliance (GRC) activities? It is to provide stakeholders with ASSURANCE that the organization has secure, compliant and resilient operations. Without assurance, an organization is at best mediocre from a …

Texas SB 2610 is a state law that goes into effect on September 1, 2025. This new law creates a legal “safe harbor” for certain Small and Medium Businesses (SMBs) in Texas, where it offers legal protection for those SMBs that suffer a data breach. However, those businesses must …

For fans of the SCF who want some free user awareness posters, we created some fun posters, one for each of the thirty-three domains that make up the SCF. Links to the graphics can be found at: https:/securecontrolsframework.com/content/images/cyber-park/scf-aat.png https:/securecontrolsframework. …