How Can My Company Prepare for CPRA?

Dec 30, 2021 Continuum GRC 0 Comment

In November 2020, California voters approved Proposition 24, including the California Privacy Rights Act, or CPRA. This law amends and expands regulations under the original California Consumer Privacy Act (CCPA).

One question that affected businesses asks is, “how can I prepare for CPRA compliance?” With the law taking effect on January 1, 2022, the clock is ticking, and many organizations are looking for ways to complete final compliance preparations.

Here, we will talk about some of the basic steps for CRPA compliance.

Awareness

What Are Consent Requirements for GDPR Compliance?

Dec 22, 2021 Continuum GRC 0 Comment

The General Data Protection Regulation (GDPR) is a set of regulations enforced in the European Union to protect consumer data privacy and instill new controls over data ownership and use. While only having jurisdiction in the EU, this law has had a major impact on how companies do business in Europe, especially digitally.

Here, we’ll discuss some of the compliance requirements in place under GDPR for consent and privacy. These requirements are deeply ingrained into GDPR law and impact the professional and technical operations of organizations operating in the EU.

Awareness

What Is a Zero-Day Exploit?

Dec 16, 2021 Continuum GRC 0 Comment

With the news of the log4Shell bug making the rounds on industry and mainstream media, security experts are scrambling to address the implications of widespread bug patches and shared open-source utilities.

Here, we wanted to address some terminologies around the bug, specifically references to this bug representing a zero-day exploit. We’ll define zero-day exploits, why they are so dangerous and how security firms address them.