Resources

White Paper

Amazon RDS Vulnerability Scanning

This white paper provides information and describes best practices that can be leveraged to conduct credentialed vulnerability and compliance scans of the Amazon RDS engines and understand the available patching methods.

September 4, 2018

• Compliance

White Paper

A Newly-Hired CISO’s Priorities: The First 30, 60 and 90 Days

 This article offers insights into priorities for CISOs during their first 90 days in office to help set the stage for a successful tenure.

March 16, 2018

• Cyber Risk Advisory

White Paper

HITRUST CSF Certification: Frequently Asked Questions

As with any complex framework, there are often questions regarding how to obtain certification, the issues surrounding the CSF, and the relationship between HIPAA and HITRUST. The objective of this FAQ document is to address and clarify common questions regarding the assurance program, HITRUST CSF scoring, and the underlying HITRUST CSF.

February 16, 2018

• Compliance

White Paper

How to Get Started with HITRUST CSF Certification

The purpose of this guidance document is to provide key information with respect to the HITRUST CSF and illustrate the steps involved in starting the HITRUST CSF certification process so organizations can approach this rigorous framework with greater ease, expertise, and efficiency.

February 16, 2018

• Compliance

White Paper

FedRAMP® Agency ATO Route: What Does Sponsorship Entail?

Each stakeholder has a role in the two FedRAMP authorization routes: Joint Authorization Board (JAB) provisional route and Agency ATO route. This publication outlines those responsibilities specific to the government agency role.

March 21, 2017

• Compliance
• FedRAMP®

White Paper

System and Organization Controls (SOC) Reports: Understanding the Differences

System and Organization Controls (SOC) reports are recognized worldwide as a tool for organizations to help build trust in their security and controls posture. This guide outlines the various SOC reports currently available in the market to help you understand the purpose of each report type and how it benefits a particular audience.

March 7, 2017

• Compliance

White Paper

Flexpod Datacenter Validated Architecture with VMware vSphere 6.0 for FedRAMP®

The primary objective for this white paper is to render an opinion on the suitability of FlexPod Datacenter to assist Agencies (Tenant) and Cloud Service Providers (CSPs) in their FedRAMP deployments.

February 11, 2017

• Compliance
• FedRAMP®