Regulatory Compliance

  • Are You Ready for the General Data Protection Regulation (GDPR)?

    As we move closer to the enforceable compliance date of May 25, 2018 for the General Data Protection Regulation (GDPR), many organizations are asking themselves if they are on track to meet the regulation requirements. Many organizations…

    | Jan 30, 2018
  • General Data Protection Regulation (GDPR)

    General Data Protection Regulation (GDPR) is the most comprehensive personal data privacy regulation ever issued, and its implementation deadline in May 2018 is approaching quickly. With the potential fines accompanying noncompliance, GDPR has shifted the business world’s…

    Rob Giffin Rob Giffin | Nov 02, 2017
  • FFIEC Updates Business Continuity Planning Booklet with Appendix J

    Appendix J: Strengthening the Resilience of Outsourced Technology Services The Federal Financial Institutions Examination Council (FFIEC) recently released an updated a version of its Business Continuity Booklet, which is one in the series of booklets that comprise…

    Courtney Bowers Courtney Bowers | Apr 06, 2015
  • GRC for Business Continuity Professionals

    Many business continuity professionals have expressed concern and uncertainty regarding the future of business continuity and how it will ‘fit’ with newer concepts like GRC (Governance, Risk and Compliance) and ERM (Enterprise Risk Management). In truth, these…

    Rob Giffin Rob Giffin | Sep 16, 2011
  • An Update on TC 223 and ISO 22301

    Online Exclusive – as published on drj.com  | Updated June 2012 [EDITOR’S NOTE – Brian Zawada is a member of the US Technical Advisory Group to ISO Technical Committee 223. Zawada participated in the 2011 and 2012 meetings as a…

    Brian Zawada, FBCI Brian Zawada, FBCI | Aug 11, 2011
  • Data Breaches On Deck for Federal Oversight (Again)

    In December 2009, my perspective titled “Data Breaches: A Sidewalk Sale of Consumer and Personal Information” detailed the financial, reputational and regulatory implications surrounding a data breach occurrence. Since then, little has changed (other than the fact…

    Avalution Team Avalution Team | Jun 27, 2011
  • Business Continuity: Now Required at Most Hedge Funds

    Business Continuity planning is no longer just a best practice for hedge funds, as the Securities and Exchange Commission (SEC) now requires most hedge funds to maintain up to date business continuity programs. This article explains the…

    Avalution Team Avalution Team | Mar 11, 2011
  • Plan Do Check Act (PDCA) – How it Applies To Business Continuity

    The business continuity industry has heard a lot about Plan, Do, Check Act (PDCA) recently. Nearly every emerging standard is following this approach, from BS 25999 and NFPA 1600 (2010 edition) to the new American business continuity…

    Avalution Team Avalution Team | Jun 30, 2010
  • Data Breaches: A Sidewalk Sale of Consumer and Personal Information

    Data breach is a growing risk for organizations of all sizes and from all industries.  The number of reported data breaches in recent years has skyrocketed, and their cost can be devastating to an organization’s reputation and…

    Avalution Team Avalution Team | Dec 08, 2009
  • UPDATED: What Is A Management System?

    Content updated in September 2012 |  Originally published in January 2009 First introduced to business continuity practitioners in British Standard (BS) 25999 as a Business Continuity Management System (BCMS), the management systems concept continues to gain traction in…

    Brian Zawada, FBCI Brian Zawada, FBCI | Jan 28, 2009