Data Breaches
Do I Need PCI DSS? Determine Your Scope and Compliance Obligations
You remain liable for cardholder data breaches even if you outsource processing to a third-party payment gateway or cloud provider.
data security
Everything Phish Herald has reported about data security: 4 stories, newest first. Part of our Data Breaches coverage.
Cloud Security
Bring Your Own Key: How Cloud Encryption Actually Works
Cloud providers cannot decrypt your data without your key, but they can still block access if you lose control of the key management system.
Data Breaches
How Accidental Data Disclosure Happens: Step-by-Step Mechanics
Most accidental disclosures fail because human error bypasses automated security controls that assume users act with perfect rationality and intent.
Data Breaches
Full Disk Encryption Checklist: Verify Protection Against Physical Theft
Full disk encryption protects data at rest but fails to prevent breaches caused by compromised credentials or unencrypted network traffic.