CompliancePoint

#NIST 800-53 and 800-171, if your organization is seeking government contracts or certification with federal cybersecurity frameworks, chances are good it will need to comply with one of the security frameworks. But how do they compare and differ? hubs.ly/Q049kxCL0

When businesses are assessing auditors for security assessments, these are factors they often consider: 💯 What will the quality of the audit be? ⏱️ How fast can they complete it? 💰 How much will it cost? What should you ask when vetting #infosec auditors? (link in comments)

2025 was an active year for #TCPA lawsuits, with 2,628 cases, representing a 60% increase compared to 2024. View our TCPA Litigation Trends 2025 Year in Review Report for an in-depth analysis of the spike. compliancepoint.com/marketing-comp…

These #AI uses bring elevated risks of #HIPAA violations: 🤖 AI chatbots 🤖 Training AI models with patient data 🤖 AI transcription 🤖 Misconfigured AI cloud services 🤖 Entering #PHI into public AI tools Click the link in the comments for risk mitigation best practices.

Failing to comply with the #TCPA, #TSR, and state #telemarketing laws can result in hefty fines and class action lawsuits. To ensure they operate within the bounds of these laws, businesses need to conduct thorough telemarketing compliance assessments. hubs.ly/Q04cznkS0

Alabama is the 21st state to pass a #privacy law. For a summary of the law’s applicability threshold, consumer rights, business obligations, effective date, and penalties, click the link in the comments.

A common theme has emerged in #CCPA enforcements: not providing consumers with the required methods to opt out of the sale/sharing of personal data and the use of web trackers. Click the link in the comments for examples of violations that resulted in fines. #privacy

Chances are #AI systems now touch your people, your processes, and your technology. It is also becoming part of what gets evaluated in your security assessments, but how do traditional #InfoSec standards account for AI governance? hubs.ly/Q049kMJP0 #ISO27001 #SOC2 #PCI

The #Delve story put the spotlight on the quality of auditors assessing #compliance with #privacy and #cybersecurity frameworks. In this episode of Compliance Pointers, learn how to spot the red flags that your #SOC2 auditor may not be up to par. (Complete episode in comments)

At CompliancePoint, we deliver end-to-end SOC 2 services that will simplify and accelerate your #compliance efforts. #SOC2

If your business uses website tracking tools, it’s at risk for #CIPA lawsuits and demand letters. Learn strategies and actions businesses can take to help ensure the tools on their websites are not exposing them to unnecessary CIPA risks. compliancepoint.com/privacy/cipa-a…

On March 25th, the @FCC began mandating the use of SIP code 603+. Learn more about Session Initiation Protocol technology and what #telemarketing businesses should do with the new rules in place. hubs.ly/Q048WZh00

Let an experienced team of professionals handle your #cybersecurity challenges, so you can focus on running your business, with our Virtual #CISO program.

Audit quality is a hot topic in the #infosec space right now. Here are some ways to determine if your auditor provided your organization with a high-quality #SOC2 report. hubs.ly/Q048mTQN0

The Fifth Circuit Court of Appeals held that the #TCPA requires only “prior express consent,” not “prior express WRITTEN consent,” for prerecorded calls to wireless numbers. Watch this episode of Compliance Pointers for a breakdown. hubs.ly/Q048h7dC0 #telemarketing