Cloud computing, on its own is a benign concept, identified as having these five attributes:

Details

Category: Security Compliance Platform

Read more ...

Docker is a framework making it easy to create, deploy, run, and orchestrate applications by using containers. Basically, a container is another form of virtualization. A minimal image contains functionality of an operating system, but depends on the host for all of its system calls. For a complete overview tutorial on Docker and for Docker security, we recommended more reading from the Docker Inc. site.

Details

Category: Docker Container Security

Read more ...

“If your company currently uses third party vendors to provide services that include the collection, processing and/or retention of sensitive information, you should consider inquiring into whether they have successfully completed a SOC 2 Type 2 audit, as it helps to ensure a higher standard for protecting your data.” Jeanne Madden, Vice President Operations, ADP Tax Credit Services

Details

Written by Robin Basham, VP Security & Compliance, CCO

Category: Regulatory Compliance

• SOC
• SOC 2

Read more ...

If you are an enterprise IT infrastructure administrator and you don't currently live in a cave, you've been hearing a lot about “Docker” and the term "containers".

Details

Category: Docker Container Security

Read more ...

THE CYBER CHALLENGE

If you intend to do business with the United Kingdom (UK) Government, and you handle any aspect of personal and sensitive information, you cannot even bid without having completed Cyber Essentials certification. (more at http://www.cyberessentials.org/)

Details

Written by Robin Basham, VP Security & Compliance, CCO

Category: Regulatory Compliance

Read more ...

Engineers don’t have time to translate their workloads into “audit speak.” Auditors can’t provide value in cloud-based engineering domains.

Details

Category: Security Compliance Platform

Read more ...