SOC 2 or HIPAA: Which Compliance Framework Do You Need? SOC 2, or System and Organization Control 2, is a voluntary framework that consists of criteria and controls that enable you to showcase a strong control environment and safeguard customer data from unauthorized access and vulnerabilities.  HIPAA, or the Health Insurance Portability and Accountability Act ..read more

How Is AI Used in Healthcare? AI is not really a new addition to the healthcare field; we are just noticing it more because adoption is accelerating and expanding. One year ago, we marveled that large language models, including ChatGPT, had successfully passed the US Medical Licensing Exam (USMLE) without specialized help from medical professionals ..read more

Which AI Standard Do You Need – ISO 42001 vs NIST AI RMF? ISO 42001 is a global standard designed to establish, implement, maintain, and enhance an Artificial Intelligence Management System (AIMS) organizational setting.  On the other hand, the NIST AI Risk Management Framework (AI RMF) is a voluntary program that organizations can use to ..read more

Overview of NIST AI RMF Webinar The AI RMF Webinar, conducted on June 10, 2024, and led by Ian Terry, Director for Cybersecurity Services, and Jena Andrews, Senior Consultant at I.S. Partners, delivered a comprehensive overview of artificial intelligence and the NIST AI Risk Management Framework (RMF).  The webinar underscored the importance of safely and ..read more

PCI SSC continually works to protect consumer payment data. Find out how updates to standards have evolved security measures for merchants ..read more

What Industries Are Prime Targets for Cyberattacks? Cyberattacks are a major threat impacting common types of industries such as:  These sectors are often targeted due to their valuable data and sometimes weaker cybersecurity defenses. Common threats include ransomware, which can cripple operations; phishing emails, which trick individuals into revealing sensitive information through a malicious code ..read more

Which Security Framework Do You Need? SOC 2 vs NIST CSF NIST, the National Institute of Standards and Technology at the U.S. Department of Commerce, provides a Cybersecurity Framework to help businesses of all sizes understand, manage, and reduce cybersecurity risks while protecting their networks and data.  Federal companies should adhere to NIST standards when ..read more

SOC 2 Compliance Benefits Given the rigorous process involved, many service providers question the importance of getting a SOC 2 audit (System and Organization Controls audit). We understand the hesitation—the mere mention of an “audit” can send chills down the spine of any business organization. Although demanding, becoming SOC 2 compliant is a highly rewarding ..read more

What Is SOC 2 for SaaS? SOC 2 for SaaS is an independent audit report that evaluates a tech service’s organizational controls for cloud-based data. It is specifically designed for service providers that store their customers’ sensitive data in the cloud.  When asked what sets SOC 2 for SaaS apart from other industry requirements, I.S ..read more

NIST 2.0: What Is It and When Will It Be Released? The National Institute of Standards and Technology Cybersecurity Framework (NIST CSF) version 2.0 is the updated version of NIST’s cybersecurity framework. This update adds a new focus on cybersecurity governance, improves usability, and addresses the main modern cybersecurity threats.  The NIST CSF 2.0 release ..read more