SecurityMetrics Blog

What is a Managed Firewall and Do You Need One?

Qualified managed security service providers (MSSPs) typically provide a managed firewall service as a solution for firewall operation,...
View Post

How to Implement and Maintain HIPAA Compliant Firewalls

Simply installing a firewall on your organization’s network perimeter doesn’t secure your network or make you HIPAA compliant. Proper...

Auditor Tips: Firewall Best Practices

Healthcare organizations of all sizes use firewalls to protect the perimeter of their sensitive networks. Here are some firewall best practices to...

How to Start a Career in Cybersecurity

Is a career in cybersecurity right for me? Sign Up for Academy Cybersecurity is an ever-growing field with dozens of careers available to those...

Auditor Tips: PCI DSS Scope

To discover your PCI scope and what must be included for yourPCI compliance, you need to identify anything that processes, stores, or transmits...

What are the HITRUST Requirements? 3 Steps To Get...

How do you become HITRUST certified? Specific HITRUST requirements are available through HITRUST’s MyCSF portal and will include various...

Performing an SAQ-B Version 4.0 Self-Assessment

The SAQ B is designed for merchant environments where all cardholder data is processed using standalone Point-of-Interaction (POI) terminals...

Auditor Tips: Requirement 12: PCI Compliance Basics

a risk assessment can be the most important part of your overall security and compliance program, since it helps you identify systems, third...

Auditor Tips: Requirement 10: Audit Logs and Log Monitoring

It’s critical that you configure the log monitoring solution correctly so that the appropriate directories, files, security controls, and events...

Auditor Tips: Requirement 11: Testing Security

If your organization is required to be PCI compliant, don’t procrastinate beginning the penetration test process.

Auditor Tips: Requirement 9: Improve Your Physical Security

Once you know what systems you need to protect, put controls in place that can log and restrict access to them.

Auditor Tips: Requirement 8: Use Unique ID Credentials

Requirement 8 is all about using unique ID credentials.

Auditor Tips: Requirement 7: Restrict Access

Cardholder data and card systems should only be accessible to those that need that information to do their jobs. Once you’ve implemented access...

Auditor Tips: Requirement 6: System Updating And...

System administrators have the responsibility to ensure that all system components (e.g., servers, firewalls, routers, workstations) and software...

Auditor Tips: Requirement 5: Implement And Update Your...

PCI DSS requires anti-malware software to be installed on all systems that are commonly affected by malware (e.g., Windows).

Never have a false sense of security.

Talk to a specialist