By Mac Lillard, CPA, CITP, CISA, CFE | Audit Senior Accountant According to the Payment Card Industry Data Security Council (PCD DSC) any organization that stores, processes, and/or transmits cardholder data is required to be compliant with Payment Card Industry Data Security Standard (PCI DSS). There is a common misconception that use of a third-party provider…
Effective cybersecurity measures and actively futureproofing your technology are no longer luxuries or only feasible for large enterprises. Tackling these critical issues together in a smart, coordinated way allows your business to mitigate risk and plan for the future while also maximizing your IT resources and budget. To do this, business leaders should first understand…
Managing risk is becoming an increasingly important business concern because data security is not an issue that can be permanently resolved. Adding new complexity to internal security challenges, the new data privacy protection laws place an additional burden on organizations to prioritize security measures around consumer data. In this escalating risk environment, a risk management…
The explosion in the use of debit and credit cards is not without a downside. As more and more credit cards are provided to merchants (including nonprofit organizations), the potential that the information will be stolen also increases. Consumers expect their card information will be handled by merchants in a secure manner. When card data…
The policies and procedures template discussed in the webinar is available for download here.
For smaller or start-up nonprofits, infrastructure elements like information technology (IT) are often small and uncomplicated allowing the greatest flexibility and economy. The bad news is that while the organization is saving money, aging IT systems lack critical security features as well as the strategic and functional advantages enjoyed by peers who have prioritized IT…
Concerns about cyber threats disrupting core operations are now a top operational risk. The Securities and Exchange Commission has called threats to cybersecurity “the biggest systematic risk we have facing us.” Given the impact that breaches can have and the level of sophistication shown by hackers in recent breaches, it’s not a matter of if…