The PCAOB voted unanimously on September 9, 2026, to approve changes to QC 1000, A Firm’s System of Quality Control, which remain on track for a December 15, 2026, effective date pending SEC approval. The amendments eliminate the External QC Function requirement and limit the standard's scope to firms that must follow professional and legal…
NIST SP 800-53 provides a broad catalog of security controls for federal agencies, while NIST SP 800-171 focuses on protecting Controlled Unclassified Information in non-federal environments. The 800-171 standard draws from 800-53 but defines a more focused set of requirements for organizations handling CUI. Security teams must identify which systems process CUI to determine the…
The National Institute of Standards and Technology and the Cybersecurity and Infrastructure Security Agency have finalized a publication titled Protecting Tokens and Assertions from Forgery, Theft, and Misuse. This document provides implementation guidelines to help organizations maintain the security of tokens used in digital systems. It addresses the requirements set by Executive Order 14306 and…