All Articles

I am happy to announce that Digital Edge has successfully completed its SOC 2 Type II Audit! The team worked hard to collect and submit all the evidence to our auditors at Hogan Taylor who did a great job in quickly responding to and meeting our needs. A great job all around.
 

This Privacy Notice describes the collection, use, and disclosure of Your Personal Data when You use our Service and informs You about Your privacy rights and how the law protects You. By using the Service, You agree to the collection and use of information per this Privacy Notice.
 

About: XYZ, a non-profit organization focused on enhancing maternal and infant health, faces the challenge of safeguarding payment pages to comply with PCI DSS regulations while handling sensitive donor data.

Challenge: PCI DSS compliance requires XYZ to actively monitor the integrity of payment pages to prevent malicious attacks and unauthorized changes. This necessitates a robust solution capable of detecting and responding to potential security threats promptly.

Solution: To address this challenge, Digital Edge (DE) implemented a proactive monitoring system utilizing AWS Lambda, DynamoDB, and SNS. This custom file integrity monitoring (FIM) solution conducts regular scans, compares file hashes against baseline values, and triggers alerts in case of discrepancies.

Business Benefit: DE's solution empowers XYZ to maintain compliance with PCI DSS regulations while enhancing the security posture of its donation processing environment. By actively monitoring payment pages and promptly addressing security threats, XYZ can minimize the risk of data breaches and maintain donor trust.

Value-Added Benefits:

1. Enhanced Security: Proactive monitoring helps XYZ detect and respond to unauthorized changes, reducing the likelihood of data breaches and financial losses.
2. Regulatory Compliance: The solution ensures adherence to PCI DSS requirements, demonstrating XYZ's commitment to industry standards and best practices in data security.
3. Operational Efficiency: Leveraging AWS serverless technologies streamlines security monitoring efforts, allowing XYZ to focus on its mission-critical activities without compromising on security standards.
4. Timely Incident Response: Integration with Amazon SNS enables swift notification of security issues, facilitating immediate investigation and remediation to minimize disruptions to donation processing operations.

Basic security tools, such as firewalls, antivirus software (AV), and encryption tools, while essential, often lack the sophistication needed to combat evolving cyber threats effectively.

As the AI revolution gains momentum, the global focus on controlling its impact intensifies. In the realm of privacy and cybersecurity, there's a growing concern about the trajectory of AI and our responsibilities within it.

Modern Solutions for Infrastructures in AWS: Zero Trust, Code Based Cybersecurity, and Certification in The Cloud

Michael Petrov is presenting a three-day virtual seminar/workshop: “Cybersecurity Standards Versus Hackers and Government” through ISACA New York Metropolitan Chapter.

This three day course covers the basics of cybersecurity standards and frameworks. Designed for I.T. and Cybersecurity Professionals, topics include: standards, methodology, review, and audit techniques, implementations and operations of cybersecurity standards.