Illinois audits & alerts
Industry audit summaries and breach trackers linked from the Illinois regulator resource matrix. View all news → · All industries → · Regulator resources →
Independent audits of major Illinois banks reveal a wide range of cybersecurity results. Banks are bound by the GLBA Safeguards Rule and FFIEC guidance, and weak email authentication is a direct path to business email compromise and wire fraud.
Read Update
Independent audits of major Illinois hospitals and healthcare systems reveal significant cybersecurity gaps — scores run from 60% down to 44%, with 3 of 5 below 60%. the HIPAA Security Rule makes authenticated email critical.
Read Update
Independent audits of major Illinois real estate brokerages reveal significant cybersecurity gaps — scores run from 60% down to 44%, with 5 of 6 below 60%. wire-fraud and business email compromise prevention makes authenticated email critical.
Read Update
Independent audits of major Illinois school districts and local government reveal significant cybersecurity gaps — scores run from 68% down to 44%, with 5 of 6 below 60%. state cybersecurity training and coordinator requirements makes authenticated email critical.
Read Update
Independent audits of major Illinois accounting firms reveal a wide range of cybersecurity results. The IRS (Publication 4557) requires every tax professional to maintain a written information security plan (WISP) to keep a PTIN, and the FTC Safeguards Rule backs it with civil penalties.
Read Update
Independent audits of major Illinois auto dealerships reveal a wide range of cybersecurity results. Auto dealers are classified as financial institutions under the FTC Safeguards Rule (16 CFR Part 314) and must maintain a documented information security program.
Read Update
Independent audits of major Illinois credit unions reveal a wide range of cybersecurity results. GLBA and the FTC Safeguards Rule require documented safeguards for members' nonpublic personal information.
Read Update
Independent audits of major Illinois dental groups reveal a wide range of cybersecurity results. The HIPAA Security Rule requires every practice to perform and document a security risk analysis and safeguard ePHI in transit.
Read Update
Independent audits of major Illinois title companies reveal a wide range of cybersecurity results. Wire-transfer fraud almost always starts with a spoofed or look-alike email.
Read Update
Independent audits show significant variation in email security among Illinois’ leading law firms. Foley & Lardner leads with a very strong 88%, while several firms score below 50%.
Read Update