{"id":10718,"date":"2021-12-10T06:25:45","date_gmt":"2021-12-10T14:25:45","guid":{"rendered":"https:\/\/wamsinc.com\/?p=10718"},"modified":"2023-12-08T03:18:49","modified_gmt":"2023-12-08T11:18:49","slug":"what-you-need-to-know-about-cybersecurity-compliance","status":"publish","type":"post","link":"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/","title":{"rendered":"What You Need to Know about Cybersecurity Compliance"},"content":{"rendered":"\n

Due to the increasing number of cybersecurity-related laws, regulations, and standards, many companies might discover that they now need to comply with one or more of them. Here is what you need to know if your business makes that discovery.<\/span><\/p>\n\n\n\n

When the European Union\u2019s (EU\u2019s) General Data Protection Regulation (GDPR) first took effect, it was touted as the most important change in data-privacy regulations in the last 20 years. GDPR has lived up to the hype. It has prompted many other governments around the world to follow suit.<\/p>\n\n\n\n

More than 130<\/a> countries and territories now have comprehensive data-protection and data-privacy laws. For example, in the United States, California<\/a>, Virginia<\/a> and Colorado<\/a> have laws to safeguard citizens\u2019 personal data and protect their data-privacy rights. These laws are in addition to all the other cybersecurity-related regulations and standards developed by industry groups, regulatory authorities, and other groups.<\/p>\n\n\n\n

Due to the increasing number of cybersecurity-related laws, regulations, and standards, many companies might find that they need to comply with one or more of them. Adhering to laws, regulations, and standards that deal with data protection, data privacy, and other cybersecurity mainstays is often referred to as cybersecurity compliance.<\/p>\n\n\n\n

Why Cybersecurity Compliance Is a Good Idea<\/strong><\/h3>\n\n\n\n

Cybersecurity compliance is beneficial for businesses several ways. For starters, it reduces the risk of incurring a data breach (or another type of cyberattack) because the systems and controls needed to safeguard the network and data are in place. And being breach-free demonstrates that a company cares about its customers and is able to protect their data. This strengthens the company\u2019s reputation and helps the business earn customers\u2019 trust and loyalty.<\/p>\n\n\n\n

In some cases, complying with cybersecurity-related laws, regulations, or standards is more than just a good idea \u2014 it is mandatory. For example, all US healthcare providers, healthcare clearinghouses, and health plan providers must comply with the US Health Insurance Portability and Accountability Act (HIPAA). Non-compliant healthcare entities might face fines, penalties, and lawsuits if they experience data breaches. In addition, they might incur other expenses, such as the cost of providing free credit-monitoring subscriptions for victims. Further, a data breach might damage their reputation, resulting in lost customers and lost business opportunities.<\/p>\n\n\n\n

Achieve Cybersecurity Compliance Using Frameworks<\/strong><\/h3>\n\n\n\n

To help achieve cybersecurity compliance, companies can use cybersecurity compliance frameworks. There is no set format or formula for these frameworks, so their content varies widely.<\/p>\n\n\n\n

Some cybersecurity compliance frameworks provide a high-level overview of how to design, implement, and manage a compliant system or operation. They present best practices, guidelines, and recommendations, but they do not dictate how the system or operation must be designed or which specific controls must be included. These frameworks are not associated with any specific law, regulation, or standard.<\/p>\n\n\n\n

Other frameworks take the opposite approach. They list in great detail all the requirements that must be met for the system or operation to be deemed compliant for a specific law, regulation, or standard.<\/p>\n\n\n\n

Frequently Used Frameworks<\/strong><\/h3>\n\n\n\n

Many cybersecurity compliance frameworks are available. Here are a few examples of popular ones:<\/p>\n\n\n\n

NIST Cybersecurity Framework.<\/em> The US Department of Commerce\u2019s National Institute of Standards and Technology (NIST) offers several frameworks, the most popular of which is the NIST Cybersecurity Framework<\/a>. This framework covers the basics on how to understand, manage, and reduce cybersecurity risk and how to protect networks and data. It is not associated with any specific law, regulation, or standard. Companies often use this framework to learn about and implement cybersecurity best practices.<\/p>\n\n\n\n

CIS Critical Security Controls.<\/em> The Center for Information Security (CIS) provides the CIS Critical Security Controls<\/a> (aka CIS Controls). The prioritized controls provide a starting point for businesses that want to improve their cybersecurity defenses. The CIS Controls map to most major compliance frameworks, including the NIST Cybersecurity Framework and PCI DSS. It is not associated with any specific law, regulation, or standard.<\/p>\n\n\n\n

PCI DSS framework.<\/em> The Payment Card Industry Security Standards Council administers the Payment Card Industry Data Security Standards<\/a> (PCI DSS), a series of data security standards for organizations that accept American Express, Discover, JCB International, Mastercard, UnionPay, and Visa payment cards. The PCI DSS framework specifies 12 requirements that must be met to achieve compliance with these standards. The PCI DSS framework also helps organizations create a secure environment in which to process, store, and transmit cardholder data.<\/p>\n\n\n\n

ISO\/IEC 27001:2013.<\/em> ISO\/IEC 27001:2013<\/a> is an information security framework developed by the International Organization for Standardization (ISO) and International Electrotechnical Commission (IEC). It specifies requirements that define how to implement, monitor, maintain, and continuously improve an information security management system (ISMS). Companies interested in achieving certification to one of the ISO\/IEC 27000 standards can use this framework to create a compliant ISMS. However, certification is optional. Some companies simply use the framework to learn ISMS best practices.<\/p>\n\n\n\n

Cybersecurity Compliance Is Worthwhile But Often Confusing<\/strong><\/h3>\n\n\n\n

Achieving cybersecurity compliance is a worthwhile but often confusing endeavor for companies. Fortunately, cybersecurity compliance frameworks are available to guide you. We can also help your business implement the systems and controls needed to adhere to one or more cybersecurity-related laws, regulations, or standards.<\/p>\n","protected":false},"excerpt":{"rendered":"

Due to the increasing number of cybersecurity-related laws, regulations, and standards, many companies might discover that they now need to comply with one or more of them. Here is what you need to know if your business makes that discovery. When the European Union\u2019s (EU\u2019s) General Data Protection Regulation (GDPR) first took effect, it was…<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[9],"tags":[],"yoast_head":"\nWhat You Need to Know about Cybersecurity Compliance - WAMS Inc<\/title>\n<meta name=\"description\" content=\"WAMS is an Managed IT service provider serving all over South California, WAMS is not just a standard managed service provider that serves small businesses \u2013 we are specialized in managing law firm IT services. Our law firm IT services are designed to solve your practice\u2019s challenges on the ground level and help you provide the maximum value to clients\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What You Need to Know about Cybersecurity Compliance - WAMS Inc\" \/>\n<meta property=\"og:description\" content=\"WAMS is an Managed IT service provider serving all over South California, WAMS is not just a standard managed service provider that serves small businesses \u2013 we are specialized in managing law firm IT services. Our law firm IT services are designed to solve your practice\u2019s challenges on the ground level and help you provide the maximum value to clients\" \/>\n<meta property=\"og:url\" content=\"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/\" \/>\n<meta property=\"og:site_name\" content=\"WAMS Inc\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/wamsinc\/\" \/>\n<meta property=\"article:published_time\" content=\"2021-12-10T14:25:45+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-12-08T11:18:49+00:00\" \/>\n<meta name=\"author\" content=\"WAMS, Inc.\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@wamsinc\" \/>\n<meta name=\"twitter:site\" content=\"@wamsinc\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"WAMS, Inc.\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/\"},\"author\":{\"name\":\"WAMS, Inc.\",\"@id\":\"https:\/\/wamsinc.com\/#\/schema\/person\/2f7f97dae31e9ce93353d1ed69ef63d5\"},\"headline\":\"What You Need to Know about Cybersecurity Compliance\",\"datePublished\":\"2021-12-10T14:25:45+00:00\",\"dateModified\":\"2023-12-08T11:18:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/\"},\"wordCount\":874,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/wamsinc.com\/#organization\"},\"articleSection\":[\"News\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/#respond\"]}]},{\"@type\":[\"WebPage\",\"SearchResultsPage\"],\"@id\":\"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/\",\"url\":\"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/\",\"name\":\"What You Need to Know about Cybersecurity Compliance - WAMS Inc\",\"isPartOf\":{\"@id\":\"https:\/\/wamsinc.com\/#website\"},\"datePublished\":\"2021-12-10T14:25:45+00:00\",\"dateModified\":\"2023-12-08T11:18:49+00:00\",\"description\":\"WAMS is an Managed IT service provider serving all over South California, WAMS is not just a standard managed service provider that serves small businesses \u2013 we are specialized in managing law firm IT services. Our law firm IT services are designed to solve your practice\u2019s challenges on the ground level and help you provide the maximum value to clients\",\"breadcrumb\":{\"@id\":\"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/wamsinc.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What You Need to Know about Cybersecurity Compliance\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/wamsinc.com\/#website\",\"url\":\"https:\/\/wamsinc.com\/\",\"name\":\"WAMS Inc\",\"description\":\"IT Consulting Transformed\",\"publisher\":{\"@id\":\"https:\/\/wamsinc.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/wamsinc.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/wamsinc.com\/#organization\",\"name\":\"WAMS IT Consulting Transformed\",\"url\":\"https:\/\/wamsinc.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/wamsinc.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/wamsinc.com\/wp-content\/uploads\/2022\/07\/website-logo.png\",\"contentUrl\":\"https:\/\/wamsinc.com\/wp-content\/uploads\/2022\/07\/website-logo.png\",\"width\":272,\"height\":59,\"caption\":\"WAMS IT Consulting Transformed\"},\"image\":{\"@id\":\"https:\/\/wamsinc.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/wamsinc\/\",\"https:\/\/x.com\/wamsinc\",\"https:\/\/www.linkedin.com\/company\/wams-inc\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/wamsinc.com\/#\/schema\/person\/2f7f97dae31e9ce93353d1ed69ef63d5\",\"name\":\"WAMS, Inc.\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/wamsinc.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/385798263f5a3433d9f8a71d1b43aab6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/385798263f5a3433d9f8a71d1b43aab6?s=96&d=mm&r=g\",\"caption\":\"WAMS, Inc.\"},\"description\":\"The experts at WAMS, Inc. all have a background in the legal industry and understand the software and the demands that come along with it. That\u2019s why all our clients receive a dedicated account manager and engineer with specific planning that works for your business needs. We didn\u2019t break into the tech world to pinch pennies from clients. We go into every partnership to help their business scale gracefully. Your company growth is our company growth, always.\",\"url\":\"https:\/\/wamsinc.com\/author\/khaightwamsinc-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What You Need to Know about Cybersecurity Compliance - WAMS Inc","description":"WAMS is an Managed IT service provider serving all over South California, WAMS is not just a standard managed service provider that serves small businesses \u2013 we are specialized in managing law firm IT services. Our law firm IT services are designed to solve your practice\u2019s challenges on the ground level and help you provide the maximum value to clients","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/","og_locale":"en_US","og_type":"article","og_title":"What You Need to Know about Cybersecurity Compliance - WAMS Inc","og_description":"WAMS is an Managed IT service provider serving all over South California, WAMS is not just a standard managed service provider that serves small businesses \u2013 we are specialized in managing law firm IT services. Our law firm IT services are designed to solve your practice\u2019s challenges on the ground level and help you provide the maximum value to clients","og_url":"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/","og_site_name":"WAMS Inc","article_publisher":"https:\/\/www.facebook.com\/wamsinc\/","article_published_time":"2021-12-10T14:25:45+00:00","article_modified_time":"2023-12-08T11:18:49+00:00","author":"WAMS, Inc.","twitter_card":"summary_large_image","twitter_creator":"@wamsinc","twitter_site":"@wamsinc","twitter_misc":{"Written by":"WAMS, Inc.","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/#article","isPartOf":{"@id":"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/"},"author":{"name":"WAMS, Inc.","@id":"https:\/\/wamsinc.com\/#\/schema\/person\/2f7f97dae31e9ce93353d1ed69ef63d5"},"headline":"What You Need to Know about Cybersecurity Compliance","datePublished":"2021-12-10T14:25:45+00:00","dateModified":"2023-12-08T11:18:49+00:00","mainEntityOfPage":{"@id":"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/"},"wordCount":874,"commentCount":0,"publisher":{"@id":"https:\/\/wamsinc.com\/#organization"},"articleSection":["News"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/#respond"]}]},{"@type":["WebPage","SearchResultsPage"],"@id":"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/","url":"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/","name":"What You Need to Know about Cybersecurity Compliance - WAMS Inc","isPartOf":{"@id":"https:\/\/wamsinc.com\/#website"},"datePublished":"2021-12-10T14:25:45+00:00","dateModified":"2023-12-08T11:18:49+00:00","description":"WAMS is an Managed IT service provider serving all over South California, WAMS is not just a standard managed service provider that serves small businesses \u2013 we are specialized in managing law firm IT services. Our law firm IT services are designed to solve your practice\u2019s challenges on the ground level and help you provide the maximum value to clients","breadcrumb":{"@id":"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/wamsinc.com\/what-you-need-to-know-about-cybersecurity-compliance\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/wamsinc.com\/"},{"@type":"ListItem","position":2,"name":"What You Need to Know about Cybersecurity Compliance"}]},{"@type":"WebSite","@id":"https:\/\/wamsinc.com\/#website","url":"https:\/\/wamsinc.com\/","name":"WAMS Inc","description":"IT Consulting Transformed","publisher":{"@id":"https:\/\/wamsinc.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/wamsinc.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/wamsinc.com\/#organization","name":"WAMS IT Consulting Transformed","url":"https:\/\/wamsinc.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/wamsinc.com\/#\/schema\/logo\/image\/","url":"https:\/\/wamsinc.com\/wp-content\/uploads\/2022\/07\/website-logo.png","contentUrl":"https:\/\/wamsinc.com\/wp-content\/uploads\/2022\/07\/website-logo.png","width":272,"height":59,"caption":"WAMS IT Consulting Transformed"},"image":{"@id":"https:\/\/wamsinc.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/wamsinc\/","https:\/\/x.com\/wamsinc","https:\/\/www.linkedin.com\/company\/wams-inc\/"]},{"@type":"Person","@id":"https:\/\/wamsinc.com\/#\/schema\/person\/2f7f97dae31e9ce93353d1ed69ef63d5","name":"WAMS, Inc.","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/wamsinc.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/385798263f5a3433d9f8a71d1b43aab6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/385798263f5a3433d9f8a71d1b43aab6?s=96&d=mm&r=g","caption":"WAMS, Inc."},"description":"The experts at WAMS, Inc. all have a background in the legal industry and understand the software and the demands that come along with it. That\u2019s why all our clients receive a dedicated account manager and engineer with specific planning that works for your business needs. We didn\u2019t break into the tech world to pinch pennies from clients. We go into every partnership to help their business scale gracefully. Your company growth is our company growth, always.","url":"https:\/\/wamsinc.com\/author\/khaightwamsinc-com\/"}]}},"_links":{"self":[{"href":"https:\/\/wamsinc.com\/wp-json\/wp\/v2\/posts\/10718"}],"collection":[{"href":"https:\/\/wamsinc.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wamsinc.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wamsinc.com\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/wamsinc.com\/wp-json\/wp\/v2\/comments?post=10718"}],"version-history":[{"count":2,"href":"https:\/\/wamsinc.com\/wp-json\/wp\/v2\/posts\/10718\/revisions"}],"predecessor-version":[{"id":55868,"href":"https:\/\/wamsinc.com\/wp-json\/wp\/v2\/posts\/10718\/revisions\/55868"}],"wp:attachment":[{"href":"https:\/\/wamsinc.com\/wp-json\/wp\/v2\/media?parent=10718"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wamsinc.com\/wp-json\/wp\/v2\/categories?post=10718"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wamsinc.com\/wp-json\/wp\/v2\/tags?post=10718"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}