Compliance Audits: Have a Plan and Tell the Truth

Calls to our office reflect an enforcement upswing for data security regs, as they apply to critical infrastructure. Also under scrutiny are the contractors who serve these entities. Our experience (and a hard-hitting case linked below) shows that regulators are willing to work with non-compliant parties before they take punitive measures. But the errant parties must do three things… (Click headline for full story.)