Pennsylvania audits & alerts
Industry audit summaries and breach trackers linked from the Pennsylvania regulator resource matrix. View all news → · All industries → · Regulator resources →
Independent audits of major Pennsylvania accounting firms reveal a wide range of cybersecurity results. The IRS (Publication 4557) requires every tax professional to maintain a written information security plan (WISP) to keep a PTIN, and the FTC Safeguards Rule backs it with civil penalties.
Read Update
Independent audits of major Pennsylvania auto dealerships reveal a wide range of cybersecurity results. Auto dealers are classified as financial institutions under the FTC Safeguards Rule (16 CFR Part 314) and must maintain a documented information security program.
Read Update
Independent audits of major Pennsylvania banks reveal a wide range of cybersecurity results. Banks are bound by the GLBA Safeguards Rule and FFIEC guidance, and weak email authentication is a direct path to business email compromise and wire fraud.
Read Update
Independent audits of major Pennsylvania credit unions reveal a wide range of cybersecurity results. GLBA and the FTC Safeguards Rule require documented safeguards for members' nonpublic personal information.
Read Update
Independent audits of major Pennsylvania dental groups reveal a wide range of cybersecurity results. The HIPAA Security Rule requires every practice to perform and document a security risk analysis and safeguard ePHI in transit.
Read Update
Independent audits of major Pennsylvania hospitals and healthcare systems reveal significant cybersecurity gaps — scores run from 70% down to 50%, with 2 of 6 below 60%. the HIPAA Security Rule makes authenticated email critical.
Read Update
Independent audits show significant variation in email security among Pennsylvania's leading law firms. Fox Rothschild, Pietragallo, and White and Williams lead at 64%, while several large firms score below 45%.
Read Update
Independent audits of major Pennsylvania real estate brokerages reveal significant cybersecurity gaps — scores run from 60% down to 44%, with 5 of 6 below 60%. wire-fraud and business email compromise prevention makes authenticated email critical.
Read Update
Independent audits of major Pennsylvania school districts and local government reveal significant cybersecurity gaps — scores run from 64% down to 34%, with 3 of 5 below 60%. state cybersecurity training and coordinator requirements makes authenticated email critical.
Read Update
Independent audits of major Pennsylvania title companies reveal a wide range of cybersecurity results. Wire-transfer fraud almost always starts with a spoofed or look-alike email.
Read Update