Chris Lippert, Director of the Privacy Practice at Schellman, details the exciting news of the APEC Cross Border Privacy Rules (CBPR) system officially going global.

Schellman's Danny Manimbo and Senior Associate within the AI practice, Jerrad Bartczak, discuss what you need to know about the overlap between HITRUST AI Security Assessment and ISO 42001 and how to map the two frameworks.

Danny Manimbo, Principal and ISO Practice Leader at Schellman, provides a comprehensive overview of ISO 27001 Certification.

Danny Manimbo, Principal and ISO & AI Practice Leader at Schellman, is here to answer the most frequently asked questions surrounding ISO 14001 Certification.

If you're an e-commerce merchant using an iframe or redirect for payment processing, recent updates to the PCI DSS SAQ A may impact how you maintain compliance. While these changes simplify requirements, a new eligibility rule has been introduced that could affect your compliance status. Here’s what you need to know.

For e-commerce merchants, navigating PCI compliance can be complex, especially when it comes to determining eligibility for Self-Assessment Questionnaire A (SAQ A). If you're unsure whether your business qualifies or what completing the SAQ entails, this guide will help clarify key requirements, recent updates, and potential consequences of non-compliance.

Schellman's Danny Manimbo and Senior Associate - AI, Jerrad Bartczak, discuss what you need to know about South Korea's AI Basic Act.

Danny Manimbo, Principal and ISO & AI Practice Leader at Schellman, is here to answer the most frequently asked questions surrounding ISO 42001 Certification.

As sustainability disclosure requirements are constantly evolving, it’s increasingly important for businesses to remain aware of these changes and prepare to comply. While the sustainability disclosure regulatory requirements typically impact larger companies, we are starting to see mid- and small-cap companies that typically operate as business-to-business suppliers be impacted by a new trend in this space. Larger, international companies are starting to update their Supplier Code of Conduct to require the measurement of GHG emissions, setting of climate targets, and procuring electricity from renewable energy sources.

Microsoft’s Supplier Security and Privacy Assurance (SSPA) program received a major update with Version 10, which took effect on September 23rd, 2024. This update introduced new requirements, particularly around artificial intelligence (AI) and ISO 42001 compliance.