The ISO/IEC 17021-1:2015 is a global guideline designed to shape how organizations that perform audits and certifications for management systems should operate. Released by the International Organization for Standardization and the International Electrotechnical Commission, this standard aims to improve the reliability and uniformity of these audits and certifications by outlining the essential requirements these organizations should fulfill.

Here, we’ll cover the basics of this document, touching on the more significant requirements and guidelines found in each section.

Awareness Continuum GRC

What Is Passwordless Authentication?

Aug 23, 2023 Continuum GRC 0 Comment

Passwords are our oldest form of digital security… and, in most cases, one of the weakest links in identity management and authentication. Phishing, database breaches, and poor digital hygiene have made authentication challenging for security and compliance. They have become the quintessential keys to our online kingdoms.

As cyberattacks grow more sophisticated, there’s a mounting urgency to move beyond traditional passwords. That’s where passwordless authentication comes in. But how does this new approach to technology work in terms of compliance and regulations?

This article will discuss passwordless authentication, its benefits, and how it fits your compliance requirements.

Awareness

How to Determine Cybersecurity Impact Level Using FIPS 199

Aug 16, 2023 Continuum GRC 0 Comment

The Federal Information Processing Standard (FIPS) 199 provides organizations and individuals with the necessary guidance to determine a cybersecurity threat’s impact level accurately. These impact levels define the level of security a system should have to protect the data contained therein adequately.

This article will take you through an overview of FIPS 199 and how it can help you understand the three categories of impact levels, define terms used in FIPS 199, assess the impact of a cybersecurity threat, and provide best practices for interpreting results and mitigating risk.