Erik from Secure Systems - Secure Systems

Change Management Policy: Controlling Changes to Reduce Security Risk

May 29, 2026 by Erik from Secure Systems

Change Management Policy: Controlling Changes to Reduce Security Risk Bottom Line Up Front A change management policy security framework prevents unauthorized modifications from introducing vulnerabilities, compliance gaps, or operational outages. Whether your auditor is reviewing SOC 2 Type II evidence, conducting an ISO 27001 surveillance audit, or validating HIPAA security controls, they’ll examine how you … Read more

FISMA Compliance: Federal Information Security Requirements

May 29, 2026 by Erik from Secure Systems

FISMA Compliance: Federal Information Security Requirements Bottom Line Up Front FISMA compliance is mandatory for federal agencies and contractors handling federal information, establishing rigorous cybersecurity requirements that protect government data and systems. You’re likely reading this because you’re bidding on a federal contract, already working with a government agency, or need to understand how FISMA … Read more

CJIS Security Policy: Compliance Guide for Law Enforcement and Vendors

May 29, 2026 by Erik from Secure Systems

CJIS Security Policy: Compliance Guide for Law Enforcement and Vendors Bottom Line Up Front If you’re reading this, you probably handle Criminal Justice Information (CJI) or provide services to agencies that do — and you need to understand the CJIS Security Policy requirements that govern access to FBI databases like NCIC, NLETS, and state criminal … Read more

System Security Plan (SSP) Template: Writing Your NIST 800-171 SSP

May 29, 2026 by Erik from Secure Systems

System Security Plan (SSP) Template: Writing Your NIST 800-171 SSP Bottom Line Up Front A System Security Plan (SSP) is your comprehensive blueprint for how your organization protects Controlled Unclassified Information (CUI) according to NIST 800-171 requirements. This guide walks you through creating an SSP template that documents your security controls, implementation details, and compliance … Read more

HIPAA Telehealth Compliance: Securing Virtual Healthcare Delivery

May 17, 2026 by Erik from Secure Systems

HIPAA Telehealth Compliance: Securing Virtual Healthcare Delivery Bottom Line Up Front This guide walks you through implementing HIPAA telehealth compliance from initial risk assessment through ongoing monitoring. You’ll establish secure video conferencing, patient data handling protocols, and documentation practices that satisfy HIPAA Security Rule and Privacy Rule requirements. Most healthcare organizations complete this implementation in … Read more

ISO 27001 Risk Assessment: Methodology and Step-by-Step Process

May 17, 2026 by Erik from Secure Systems

ISO 27001 Risk Assessment: Methodology and Step-by-Step Process Bottom line up front: This guide walks you through conducting your first ISO 27001 risk assessment from asset identification to risk treatment decisions. The full process typically takes 3-6 weeks for a 50-200 person organization, depending on system complexity and stakeholder availability. You’ll produce a complete risk … Read more

Compliance Automation Tools: Best Platforms for Continuous Compliance

May 17, 2026 by Erik from Secure Systems

Compliance Automation Tools: Best Platforms for Continuous Compliance Bottom Line Up Front You’re buying a platform that monitors your compliance posture continuously, automates evidence collection, and manages control implementation across multiple frameworks. Expect to invest $15,000-$150,000 annually depending on your organization size and framework scope. The one question that separates good compliance automation tools from … Read more

GRC Platform Comparison: Choosing the Right Governance, Risk, and Compliance Tool

May 17, 2026 by Erik from Secure Systems

GRC Platform Comparison: Choosing the Right Governance, Risk, and Compliance Tool Bottom Line Up Front You’re buying a centralized platform to manage your compliance programs, risk assessments, policy management, and audit evidence collection. Expect to invest $15,000-$150,000 annually depending on your organization size and framework complexity. The one question that separates a good GRC platform … Read more

NERC CIP Compliance: Cybersecurity Standards for Electric Utilities

May 17, 2026 by Erik from Secure Systems

NERC CIP Compliance: Cybersecurity Standards for Electric Utilities If you’re reading this, your electric utility or bulk electric system operator is either already subject to NERC CIP requirements or you’re evaluating whether these cybersecurity standards apply to your organization. NERC CIP compliance isn’t optional for entities that own, control, or operate bulk electric system assets … Read more

Industrial Control System Security: Protecting SCADA and ICS Environments

May 17, 2026 by Erik from Secure Systems

Industrial Control System Security: Protecting SCADA and ICS Environments Bottom Line Up Front Industrial control system security protects the operational technology (OT) that runs your physical processes — from manufacturing lines to power grids to water treatment plants. Unlike traditional IT systems, ICS and SCADA environments control real-world equipment, making security failures potentially catastrophic rather … Read more