By Josh von Rueden Senior Director, Cybersecurity and Risk Management July 17, 2026 On Monday, July 13, the Department of Defense placed an immediate freeze on CMMC Phase 2, the third-party assessment requirement that was set to take effect this November. A newly formed task force will review the entire program and report back within
Risk management operates in a complex and constantly changing business environment. Defined by uncertainty, volatility, and rapid technological change, business risk management has evolved from a defensive exercise into a core element of strategic leadership. For mid-market executives, the ability to identify, evaluate, and respond to potential threats goes beyond minimizing loss. Hartman Executive Advisors
In January 2025, the U.S. Department of Health and Human Services (HHS) proposed significant updates to the HIPAA Security Rule. These changes aim to enhance the cybersecurity of electronic protected health information (ePHI) across the health and human services sector. With cyber threats on the rise and health and human services organizations increasingly targeted by
Maryland’s new data privacy law, the Maryland Online Data Privacy Act (MODPA) signifies a potential shift in nationwide compliance requirements. Enacted on May 9, 2024, and set to take effect on October 1, 2025, MODPA establishes stringent standards for how businesses collect, process, and protect the personal data of Maryland consumers. It aims to create
“When it comes to core conversions, some are bad—and the rest are even worse,” said Emily Mays, Chief Administrative Officer at Community Spirit Bank. Her perspective is echoed across the industry, where core conversions continue to be one of the most stressful and consequential undertakings a bank can face. The pressure of long-term vendor contracts,
The Maryland Online Data Privacy Act (MODPA) creates new standards for how businesses collect, process, and protect personal data of Maryland consumers. Effective October 1, 2025, businesses will face significant changes in data handling and compliance requirements. This article breaks down what is the Maryland Online Data Privacy Act and how it will affect businesses
Almost 80% of community banks in the United States have entrusted their core systems to fintech providers, according to FedFis’ 2025 fintech banking data. This data reveals a profound shift in the banking industry, particularly within community banks. It’s not just a trend; it’s a critical pivot towards modernization and technological innovation, and it underscores
Healthcare organizations are acutely aware of the importance of protecting their patient’s Protected Health Information (PHI) and their staff’s Personally Identifiable Information (PII). As cybersecurity threats continue to increase both in frequency and sophistication, the digitization of health information, including electronic health records and the increased need for data aggregation, means healthcare organization must increase
In a significant shift for the financial sector, the Federal Financial Institutions Examination Council (FFIEC) has announced it will be sunsetting the Cyber Self-Assessment Tool (CAT). This decision impacts many banks and financial institutions that have relied on CAT for their annual cyber risk assessments. Completing the self-assessment tool enables institutions to evaluate their performance
Banking executives across the globe rank artificial intelligence (AI) as one of the most game-changing opportunities of our time, according to a recent report. AI is transforming the banking industry by driving personalized, 24/7 customer service through intelligent chatbots and virtual assistants, enabling banks to meet customer needs with unprecedented accuracy and immediacy. In fraud
