We now live in an era where the security of all layers of the software stack is immensely important, and simply open sourcing a code base is not enough to ensure that security vulnerabilities surface and are addressed. At Gravitational, we see it as a necessity to engage a third party that specializes in acting as an adversary, and provide an independent analysis of our sources.

The Vendor Security Alliance (VSA) questionnaire was created by a coalition of companies committed to improving Internet security. It is one of the most well-known, highly respected security questionnaires, alongside: The VSA questionnaire is free to use and accessible on the VSA website.

Your organization’s data is one of its most valuable assets. Unlike assets such as cash, however, data doesn’t always grow in value as it expands in volume — it must properly obtained, stored, secured, cleaned and surfaced so that it can put to use in meaningful ways. Accordingly, more and more businesses are looking to transition from information management to knowledge management systems. But what exactly are the differences between knowledge management and information management?

The modern global economy is a knowledge economy — the future of a business depends on its capacity to support learning and collaboration. Proper maintenance of organizational knowledge, retention of practices and support of knowledge sharing are the key tasks of knowledge management (KM) programs. How can your organization implement an effective knowledge management system?

Your application is running smoothly. Tests have passed. Suddenly you start to see 429 error responses from an API. As the name implies, you have made too many requests and your application has been rate limited. The 429 (Too Many Requests) error is an HTTP status code that often occurs when you've hit a request limitation of an API.

The quality of Redscan’s cybersecurity services has been recognised in the 2020 Cybersecurity Excellence Awards.

If your organization has a presence in California or does business with California residents, then it probably needs to comply with the California Consumer Privacy Act (CCPA). CCPA compliance is no easy task but never fear: Using this checklist and our CCPA audit guide can help smooth the way.

First things first: It is crucial to understand the difference between Governance, Risk and Compliance (GRC) and Integrated Risk Management (IRM) because this sets the stage for long term strategic risk management and breaks down the siloed approach to risk that exists in many organizations today. It is because GRC is sometimes implemented from a compliance-driven strategy rather than a risk driven initiative.

The Higher Education Community Vendor Assessment Tool (HECVAT) is a security assessment template that attempts to generalize higher education information security and data protection questions and issues regarding cloud services for consistency and ease of use. HECVAT has various versions that are free to use and provide a consistent, streamlined third-party risk assessment framework.