Blog

Here are my top PCI resources for small businesses, based on what your business needs help with.

PCI Requirement 5 deals primarily with installing and maintaining an anti-malware software.

Most acquirers know their current PCI program isn’t working as well as it should. Knowing the cause of the problem is key.

‍

Read this blog to discover what determines the cost of a penetration test, what cheaper and more expensive penetration tests include, which fit your needs, and the major red flags to avoid.

Explore this blog to get direct quotes from Mark about his experience working with SecurityMetrics, why Western Reserve chose to become HITRUST certified, and what you should look for in a HITRUST partner.

Here’s my definitive ranking of top HITRUST providers, what they offer, who they’re best for, and projected costs.

Let's break down the real costs you can expect for PCI compliance software in 2025 for SMBs.

Read this blog to get answers from a QSA on what affects the cost of a PCI level one audit, what hidden fees might exist, and what you can do to get a more accurate quote.

Here’s what to do when you get hacked, step-by-step.

If you find yourself a victim of identity theft, it’s crucial to act swiftly and systematically to protect yourself and minimize the damage.

A breach doesn’t have to be the end of the world—or your business. How you respond matters more than what happened.

Read this blog, based on the podcast “PCI DSS 4.0: One Organization’s Experience,” to learn how Martin tackled common PCI challenges, found new solutions, and discovered that PCI doesn’t have to be a solitary effort.

We asked two of our senior security experts—Garrett Adler (Senior Pen Tester) and Terrill Thorn (Director of Pen Testing)—to walk through how companies like yours can squeeze the absolute most value out of their pen test.

Read to learn who the top QSAs are for higher education, what they do best, their pricing, what their customers are saying, and more.

While it’s challenging to compile an exhaustive list of potential problems universities face when selecting a PCI QSA, here are the top issues I’ve identified that universities commonly encounter.

Let’s discuss four data security best practices and how to correctly implement them in your organization.

We understand that pursuing HITRUST validation can seem daunting, but with the right approach and the right partners, it's entirely achievable.

This blog post will guide you through the intricate world of PCI compliance in a university setting, drawing insights from industry experts.

Read this blog to discover how you can use the new HITRUST Price Range Calculator to get an estimate of your HITRUST cost.

Neglecting the simple security measures is what allows hackers into a business network and allows them to steal your sensitive information.

As of March 31, 2025, PCI DSS v4.0.1 is live with new, updated, and altered requirements.

The difference: HITRUST vs. HIPAA HITRUST is a compliance framework created by a private alliance of security industry experts and includes many aspects of HIPAA Security and Privacy Rules.

Learn what a forensic investigation accomplishes and how much it might cost.