What Is ISO 17021 and Certification of Management Systems?

ISO 170921 featured

The ISO/IEC 17021-1:2015 is a global guideline designed to shape how organizations that perform audits and certifications for management systems should operate. Released by the International Organization for Standardization and the International Electrotechnical Commission, this standard aims to improve the reliability and uniformity of these audits and certifications by outlining the essential requirements these organizations should fulfill.

Here, we’ll cover the basics of this document, touching on the more significant requirements and guidelines found in each section.

 

Read More

What Is Passwordless Authentication?

passwordless authentication featured

Passwords are our oldest form of digital security… and, in most cases, one of the weakest links in identity management and authentication. Phishing, database breaches, and poor digital hygiene have made authentication challenging for security and compliance. They have become the quintessential keys to our online kingdoms.

As cyberattacks grow more sophisticated, there’s a mounting urgency to move beyond traditional passwords. That’s where passwordless authentication comes in. But how does this new approach to technology work in terms of compliance and regulations?

This article will discuss passwordless authentication, its benefits, and how it fits your compliance requirements. 

Read More

Understanding the Difference Between HIPAA and HITRUST

HIPAA vs. HITRUST featured

Within the world of healthcare compliance and information security, there’s been increasing confusion around some terms and organizations. We’ve heard a bit about some of this confusion, specifically around HITRUST and HIPAA. 

Both are connected to the preservation of health information, yet they fulfill separate functions and are founded on differing principles. This article clarifies the differences between these two. Whether a healthcare practitioner or a business associate, this guide will describe where HITRUST fits into overall compliance (if at all). 

 

Read More