Topic

CIA triad

The CIA Triad—Confidentiality, Integrity, and Availability—is a foundational information security model for protecting data and systems. Explore how these three principles inform privacy, cybersecurity, and data protection requirements in the U.S. and EU, including GDPR security obligations, access controls, encryption, data integrity, resilience, incident response, risk assessments, and technical and organizational measures designed to protect personal data.

CCPA Cybersecurity Audit Requirements: Understanding Article 9 of the CalPrivacy Regulations

California's proposed CCPA cybersecurity audit regulations require certain businesses to conduct independent annual audits and executive certifications. This guide explains who is covered, what must be audited, and how to build a compliant cybersecurity governance program.

GDPR Data Security Explained: A Practical Guide to Technical and Organizational Measures

A practical guide to GDPR data security requirements, including risk assessments, technical and organizational measures, encryption, pseudonymization, resilience, processor oversight, staff training, authentication, and the ongoing testing needed to protect personal data.

Subscribe to The de la Torre Review