by Henry Sprafkin | Jun 7, 2021 | Blog
The first two installments in this series focused on risk management and risk-based control selection. While not a requirement, it is best to build the security control library based on an established control framework. There are over 200 different risk management,...
by Henry Sprafkin | Apr 21, 2021 | Blog
In my first blog in this series, I focused on how Business Associates can ensure the data they interact with on behalf of customers remains secure and confidential. I shared thoughts on the importance of risk analysis and how to focus resources on the most impactful...
by Henry Sprafkin | Mar 17, 2021 | Blog
As CISO for Clearwater, I am responsible not only to internal stakeholders, but to customers as well. We take very seriously the responsibility to implement the processes and controls necessary to meet and exceed the requirements of our customers and ensure the data...