Commonplace to information security professionals, regulatory compliance does not necessarily guarantee security. However, in a world rife with perpetual breaches and data loss, we hear more and more about the importance of regulatory compliance and IT governance, risk management and compliance (or GRC for short). For those folks who are required to abide by regulations such as HIPAA, SOX or PCI (especially those who fall under multiple regulations), maintaining compliance can be cumbersome. These requirements, in addition to normal information security duties, can be simply overwhelming for many of today’s professionals. This is one of many reasons why I was... Read more →