“We Don’t Use AI” Is a Claim, Not a Control
by Kelly O’Brien on July 24, 2026 at 1:53 PM
A question we hear often from clients sounds simple on its face: Our company says it doesn’t use AI, and our acceptable use policy says the same. How do we actually prove our employees aren’t using it? It is a fair question, and the honest answer is uncomfortable. A written policy sta …
PCI DSS Compensating Controls: When & How to Use Them
by Kelly O’Brien on June 17, 2026 at 4:42 PM
Every organization that stores, processes, or transmits payment card data eventually runs into the same wall. The Payment Card Industry Data Security Standard (PCI DSS) sets a clear bar, but a legacy system, a vendor limitation, or a business reality can make a specific requirement im …
Maintaining Targeted Risk Analysis (TRAs) for PCI DSS Compliance
by Kelly O’Brien on May 19, 2026 at 10:50 AM
Every organization that processes, stores, or transmits cardholder data is required to protect it. That much is well understood. What is less understood, and where many organizations quietly fall short, is how they justify specific risk-based decisions inside their compliance program. …
HIPAA 2026 Security Rule Overhaul: Why the Stryker Attack Matters
by Kelly O’Brien on March 17, 2026 at 2:51 PM
On March 11, 2026, the Iran-aligned hacktivist group Handala launched a devastating cyberattack on Stryker Corporation, one of the largest medical device companies in the United States, framing it as retaliation for U.S.-Israeli military strikes that killed civilians in Iran. The atta …
HIPAA Updates 2026: What Healthcare Organizations Must Know
by Kelly O’Brien on February 11, 2026 at 5:13 PM
The healthcare industry is heading into one of its most significant regulatory shifts in over a decade. With proposed changes to both the HIPAA Security Rule and Privacy Rule expected to be finalized in 2026, organizations that handle electronic protected health information (ePHI) nee …
How Often Should Internal Audits Be Conducted?
by Kelly O’Brien on November 25, 2025 at 4:44 PM
Internal audits play a vital role in keeping an organization running smoothly. They help leadership confirm that processes are working as intended, risks are being managed, and regulatory obligations are being met. Despite their importance, one of the most common questions companies a …
.webp?width=2169&height=526&name=Compass%20regular%20transparent%20website%20(1).webp)
-1.webp?width=2169&height=620&name=Compass%20regular%20transparent%20website%20smaller%20(1)-1.webp)


%20for%20PCI%20DSS%20Compliance.jpg)


