Blog

black and white image of a tug-of-war | resistance to compliance

Starting Compliance for the First Time? Expect Resistance. Here’s What to Do.

So your boss just dropped the news that you’ve been chosen to coordinate getting your organization compliant against some standard you know nothing about? Been there. We’ve written articles to help you figure out how to become compliant for the first time, and how to prepare for your first assessment. You’ll also need to be […]

Read More
Arrow icon made of wooden cubes with the leader and followers pointing opposite directions | uncooperative clients on compliance engagements

Turf Protection on Compliance Engagements — An Avoidable Reality

Turf Protection on Compliance Engagements — An Avoidable Reality Every compliance Consultant has experienced it. I certainly have, and so have each of TCT’s Consultants. In just about every engagement, you’re going to bump into someone who’s feeling territorial about their job. When someone is protecting their turf, you get resistance in various forms — […]

Read More
Headshot of Adam Goslin for the Compliance Unfiltered podcast

[Podcast] Running Compliance in the Midst of an Emergency

Compliance Unfiltered is TCT’s tell-it-like-it is podcast, dedicated to making compliance suck less. It’s a fresh, raw, uncut alternative for anyone who needs honest, reliable, compliance expertise with a sprinkling of personality. Show notes: Running Compliance in the Midst of an Emergency Quick Take On this week’s episode of Compliance Unfiltered, the CU guys take […]

Read More
young businessman cupping his ear to listen | pci 4.0 what we’ve learned

6 Months After PCI 4.0: What QSAs Are Saying and What We’ve Learned

The long-anticipated PCI DSS 4.0 update was released six months ago, and the PCI world is still buzzing over it. Not surprisingly, PCI 4.0 was the hottest topic at September’s 2022 North America Community Meeting in Toronto, Canada. Things change in the security and compliance space over time. This major update is the PCI Council’s […]

Read More
Headshot of Adam Goslin for the Compliance Unfiltered podcast

[Podcast] PCI NACM – Toronto Post Show Wrap-Up

Compliance Unfiltered is TCT’s tell-it-like-it is podcast, dedicated to making compliance suck less. It’s a fresh, raw, uncut alternative for anyone who needs honest, reliable, compliance expertise with a sprinkling of personality. Show Notes: PCI NACM – Toronto Post Show Wrap-Up Quick Take On this week’s episode of Compliance Unfiltered, the guys are back from […]

Read More
chain with a weak link | companies need security attention everywhere

Why Companies Need Security Attention Everywhere

LastPass seems to have dodged a bullet last month. In August, the password management company announced that one of their development servers had been hacked. Thankfully, because it was only the dev server and not the production server, no customer data was exposed. But did they really dodge that bullet? It’s great news that no […]

Read More
Headshot of Adam Goslin for the Compliance Unfiltered podcast

[Podcast] Why Implementing Overall Security Is Important

Compliance Unfiltered is TCT’s tell-it-like-it is podcast, dedicated to making compliance suck less. It’s a fresh, raw, uncut alternative for anyone who needs honest, reliable, compliance expertise with a sprinkling of personality. Show Notes: Why Implementing Overall Security Is Important Quick Take On this week’s episode of Compliance Unfiltered, we take a hard look at […]

Read More