Security Compass Blog

CMMC is a means of unifying cybersecurity standards for the U.S. Department of Defense. Learn how you can achieve compliance with this new standard.

Learn how penetration testing can help healthcare providers resist attacks from Ryuk Ransomware, keep patient records secure, and provide uninterrupted care.

Attackers are following the trajectory of software development and have their eyes on APIs. Regularly testing the security of your APIs reduces your risk.

Security testing has increased considerably over the past decade. But are vulnerability scanners enough to ensure software security?

Ask these five questions to find a penetration testing provider that both satisfies your technical needs and works in harmony with your business.

Moving applications from on-premise to SaaS brings a different set of risks. First among those is the fact that users data is stored in the SaaS provider's data center.

This Cybersecurity Awareness Month, take time to consider all the devices you have online. These 10 tips will help you create or strengthen your IoT security plan.

Businesses who conduct Red Team exercises have reduced costs when a data breach occurs.

Cloud adoption has gone mainstream. Taking full advantage of the benefits takes planning, skill, and a careful weighing of cloud security risks.

Securing a hybrid cloud environment can be challenging, but these best practices will help businesses minimize risk while taking advantage of the benefits.

Zero trust essentially involves changing the approach toward securing our systems and infrastructure. Read more to learn how you can prevent data breaches with this approach.

As more organizations adopt AWS services, penetration testing is critical for designing, securing, reviewing, and improving your cloud infrastructure.

Digital transformation is at the heart of the changing landscape in the insurance space, however, insurers must consider the risk implications of any change.

Our consulting team performed an evaluation of the Android version of Canada’s COVID alert app to evaluate data privacy and security concerns.

DevOps teams are always under tremendous pressure to release products faster while integrating security. How can they achieve these goals?

Security teams add immense value to the overall business, however, they’re often unable to communicate their value in terms of growth and profitability. Read on to learn how you can achieve this.

Building security into a bank’s digital transformation plan enables financial institutions to move at the speed of business and prevent setbacks from data breaches.

Many security teams still use data flow diagrams to build security into applications. But, is that the right threat modeling approach for security?