Compliance Management
Due to the rapid changes in technology and how organizations perform their businesses, the cost of compliance requirements and expectations have become more and more difficult and complicated.
The consequences for non-compliance have become more enormous for organizations which include hefty fines, levies, loss of revenue, and most importantly loss of brand reputation.
Engold Consulting can assist to perform compliance assessments of your IT environment to support your other governance, and risk management activities that would provide more clarity to your senior management, regarding how to meet compliance requirements.
At Engold Consulting, we have in-depth experience across various security frameworks, Government, and Industry compliance regulations. These include the following;
- Sarbanes-Oxley Act (SOX)
- General Data Protection Regulation (GDPR)
- Gramm-Leach-Bliley Act (GLBA)
- Payment Card Industry Data Security Standards (PCI DSS)
- Health Insurance Portability and Accountability Act (HIPAA)
- HITRUST Common Security Framework (HITRUST CSF)
- California Consumers Privacy Act (CCPA)
- NIST Cybersecurity Framework
- Federal Financial Institutions Examination Council (FFIEC) IT Security Handbook
- Red Flags Rule
- Federal Information Security Management Act (FISMA)
- National Institute of Standards and Technology (NIST) Special Publications 800 Series
- Control Objectives for Information Technology
- International Standards Organization (ISO) 27000 Series
Engold Consulting is continuously researching and identifying global compliance requirements and integrating those newly identified compliance requirements into our business frameworks.