Bob Ertl, Author at Kiteworks

Your Complete Checklist for Achieving HIPAA Compliance

HIPAA Compliance Requirements: The Complete Guide, Updated for 2025 Security Rule Changes

by Bob Ertl July 8, 2026July 9, 2026 | HIPAA Compliance

The Health Insurance Portability and Accountability Act establishes federal standards for protecting patient health information across the organizations that create, receive, maintain, or transmit it. HIPAA compliance is not a...

Cryptography 101: Public Key, Private Key, and How They Work Together

How AES-256 and Public Key Cryptography Work Together to Protect Sensitive Data

by Bob Ertl July 7, 2026July 8, 2026 | CMMC Compliance

AES-256 encryption is widely regarded as the strongest symmetric encryption algorithm available. But there’s a problem it can’t solve on its own: how do two parties securely share the key...

Controlled File Sharing with External Legal Partners

How Enterprises Should Share Confidential Files with Outside Law Firms and Auditors

by Bob Ertl July 2, 2026July 2, 2026 | Secure File Sharing

Enterprises should share confidential files with outside law firms and auditors through a governed platform that enforces encryption in transit and at rest, granular time-limited access controls, and immutable audit...

12 Features for Secure Enterprise MFT Evaluation

Enterprise MFT Solutions: The 12 Features Security and Compliance Teams Must Evaluate

by Bob Ertl July 2, 2026July 2, 2026 | Managed File Transfer

When evaluating enterprise managed file transfer (MFT) solutions, prioritize twelve features: strong encryption in transit and at rest, broad secure protocol coverage, robust authentication and access controls, the vendor’s security...

Log4Shell Fuels Tenfold UK Healthcare Cyberattacks

UK Healthcare Faces a Tenfold Surge in Cyberattacks — Log4Shell Is Still Winning

by Bob Ertl June 30, 2026June 30, 2026 | Cybersecurity Risk Management

A vulnerability disclosed and patched more than four years ago is now the leading driver of cyberattacks against UK healthcare — and the scale of the assault has no recent...

AI Data Governance and Secure File Transfer: Controlling Sensitive Data in the Age of AI

by Bob Ertl June 29, 2026June 29, 2026 | Managed File Transfer

The rapid adoption of artificial intelligence introduces unprecedented risks to enterprise data security and regulatory compliance. Without strict AI data governance, organizations lose visibility into how sensitive intellectual property, personally...

Secure File Transfer and MFT Evaluation for Regulated Enterprises

Secure File Transfer for Regulated Enterprises: How to Evaluate MFT and Secure Collaboration Platforms

by Bob Ertl June 26, 2026June 26, 2026 | Secure File Transfer

Regulated enterprises cannot rely on consumer-grade applications or legacy enterprise file sync and share (EFSS) tools to handle sensitive intellectual property, personally identifiable information (PII), or protected health information (PHI)....

24 Billion Credentials: Control Plane Risks Exposed

24 Billion Exposed Credentials Are in Attacker Hands. Is Your Control Plane Ready?

by Bob Ertl June 24, 2026June 24, 2026 | Cybersecurity Risk Management

On June 15, 2026, Cybernews researchers disclosed the responsible takedown of an unsecured Elasticsearch cluster containing 8.3 terabytes of data – 24 billion records of usernames and passwords, aggregated from...

Saudi Financial Data Security Risks Examined

Five Data Security Risks Facing Saudi Financial Institutions

by Bob Ertl June 20, 2026June 20, 2026 | Cybersecurity Risk Management

Financial institutions in Saudi Arabia face unprecedented challenges as digital transformation accelerates across the Kingdom. Between the Saudi Vision 2030 initiatives driving technological adoption and persistent threats from cybercriminals targeting...

Closing Enterprise Shadow Data Discovery Gaps

The Data Discovery Gap That Blindsides Enterprises — and How to Close It

by Bob Ertl June 5, 2026June 5, 2026 | Cybersecurity Risk Management

Shadow data is not primarily a technical problem. It is an organizational change management problem that shows up as a technical one. Cloud migrations leave data behind. Development environments get...

UK Financial Services Third-Party Risk Challenges

Five Third-Party Risk Management Challenges for UK Financial Services

by Bob Ertl June 5, 2026June 5, 2026 | Third Party Risk

UK financial services face unprecedented pressure from regulatory scrutiny, sophisticated cyber threats, and complex third-party ecosystems. Managing third-party risks effectively has become a strategic imperative, yet many organisations struggle with...

Security and Compliance Blog

Learn security strategies, compare vendors, and implement best practices to prevent breaches and compliance violations from risky third party communications.

Posts by Bob Ertl

HIPAA Compliance Requirements: The Complete Guide, Updated for 2025 Security Rule Changes

How AES-256 and Public Key Cryptography Work Together to Protect Sensitive Data

Enterprise MFT Solutions: The 12 Features Security and Compliance Teams Must Evaluate

UK Healthcare Faces a Tenfold Surge in Cyberattacks — Log4Shell Is Still Winning

AI Data Governance and Secure File Transfer: Controlling Sensitive Data in the Age of AI

Secure File Transfer for Regulated Enterprises: How to Evaluate MFT and Secure Collaboration Platforms

24 Billion Exposed Credentials Are in Attacker Hands. Is Your Control Plane Ready?

Five Data Security Risks Facing Saudi Financial Institutions

Five Third-Party Risk Management Challenges for UK Financial Services

Why CVE-2026-42897 Is the Email Architecture Wake-Up Call

CVE-2026-32202: When a Folder Browse Becomes a Data Breach

Why FIPS 140-3 Encryption Matters for AI Agent Data Access

Get started.