.webp?width=2169&height=526&name=Compass%20regular%20transparent%20website%20(1).webp "Compass IT Compliance Logo")
-1.webp?width=2169&height=620&name=Compass%20regular%20transparent%20website%20smaller%20(1)-1.webp "Compass IT Compliance")
“We Don’t Use AI” Is a Claim, Not a Control
by Kelly O’Brien on July 24, 2026 at 1:53 PM
A question we hear often from clients sounds simple on its face: Our company says it doesn’t use AI, and our acceptable use policy says the same. How do we actually prove our employees aren’t using it? It is a fair question, and the honest answer is uncomfortable. A written policy sta …
Shadow IT Is Now Shadow SaaS & Shadow AI: A Practical Cleanup Guide
by Donald Mills on April 22, 2026 at 2:45 AM
If you caught yourself searching "what is shadow IT" this week, you are not alone, and you have probably already lived through it. The term used to conjure rogue modems in a closet, a dusty Access database on somebody's C: drive, or a "just for the team" WiFi router plugged in under a …
PCI DSS 4.0 Password Requirements: A Guide to Compliance
by Derek Boczenowski on November 20, 2024 at 2:16 PM
As cyber threats evolve, ensuring the security of sensitive payment card data has become increasingly crucial for businesses across all industries. The Payment Card Industry Data Security Standard (PCI DSS) was introduced to provide a framework for safeguarding payment card data, incl …
Brute Force Attacks: How To Safeguard Your Password
by Danielle Corsa on June 25, 2024 at 2:00 PM
Cyber threats are ever-evolving, with brute force attacks standing out as one of the most persistent and concerning methods used by attackers. These attacks involve systematically trying various combinations of usernames and passwords until unauthorized access is gained. The relentles …
Credential Stuffing: How To Protect Yourself from Attack
by Mick Fitton on May 9, 2024 at 1:00 PM
In an age where cybersecurity threats loom large, one of the most prevalent attacks facing both individuals and businesses alike is credential stuffing. This malicious technique preys on the unfortunate reality that many people reuse the same usernames and passwords across multiple ac …
Dictionary Attacks: What They Are and How to Avoid Them
by Danielle Corsa on April 10, 2024 at 4:51 PM
With the increasing prevalence of cyber threats, safeguarding your online presence has never been more critical. As cybercriminals use various techniques to exploit system vulnerabilities and access private data, it is important to understand these methods to avoid falling prey to cyb …