https://heightscg.com/ weekly 1.0 https://heightscg.com/vciso/ monthly 0.9 https://heightscg.com/services/ monthly 0.7 https://heightscg.com/industries/ monthly 0.7 https://heightscg.com/insights/ monthly 0.7 https://heightscg.com/about/ monthly 0.7 https://heightscg.com/contact/ monthly 0.7 https://heightscg.com/privacy-policy/ monthly 0.2 https://heightscg.com/terms-of-service/ monthly 0.2 https://heightscg.com/services/security-program-assessment/ monthly 0.8 https://heightscg.com/services/cyber-risk-management/ monthly 0.8 https://heightscg.com/services/security-policy-and-awareness/ monthly 0.8 https://heightscg.com/services/third-party-and-msp-oversight/ monthly 0.8 https://heightscg.com/services/regulatory-and-framework-readiness/ monthly 0.8 https://heightscg.com/services/cloud-security-architecture/ monthly 0.8 https://heightscg.com/services/identity-and-access-management/ monthly 0.8 https://heightscg.com/services/managed-security-services/ monthly 0.8 https://heightscg.com/services/incident-readiness/ monthly 0.8 https://heightscg.com/services/ai-and-emerging-technology-governance/ monthly 0.8 https://heightscg.com/industries/healthcare/ monthly 0.7 https://heightscg.com/industries/financial-services/ monthly 0.7 https://heightscg.com/industries/government-and-defense-contractors/ monthly 0.7 https://heightscg.com/industries/technology-and-saas/ monthly 0.7 https://heightscg.com/authors/daniel-glauber/ monthly 0.5 https://heightscg.com/insights/multi-state-data-broker-laws-and-customer-data-platforms-when-registration-and-deletion-obligations-apply/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/nist-ai-risk-management-framework-how-to-decide-what-applies-to-your-organization/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/pci-dss-v4-0-what-changed-for-encryption-tokenization-and-third-party-provider-validation/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-financial-institutions-must-implement-under-finra-rule-4370-on-business-continuity-planning-and-the-2024-cybersecurity-supplement/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-financial-institutions-must-implement-under-the-ffiec-s-june-2024-cloud-computing-risk-management-guidance/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-financial-institutions-must-implement-under-the-interagency-guidance-on-model-risk-management-for-ai-and-machine-learning/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-financial-institutions-must-implement-under-the-occ-s-march-2024-third-party-risk-management-bulletin/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-financial-institutions-must-implement-when-using-ai-for-transaction-monitoring-fraud-detection-or-aml-screening/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-financial-institutions-must-prepare-for-under-proposed-federal-ai-risk-management-requirements-from-banking-regulators/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-government-contractors-must-implement-under-the-dod-s-september-2023-zero-trust-strategy-and-reference-architecture/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-government-contractors-must-implement-under-the-proposed-federal-acquisition-security-council-fasc-supply-chain-risk-information-sharing-rules/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-government-contractors-must-implement-when-using-ai-in-systems-that-process-controlled-unclassified-information/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-healthcare-organizations-must-implement-when-using-ai-for-prior-authorization-claims-processing-or-utilization-management/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-insurance-entities-must-implement-under-the-naic-insurance-data-security-model-law-amendments/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-investment-advisers-must-implement-under-the-sec-s-october-2023-safeguarding-rule-for-client-assets/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-investment-advisers-must-implement-under-the-sec-s-outsourcing-rule-for-recordkeeping-and-third-party-service-providers/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-must-be-in-place-before-operating-a-saas-platform-in-a-fedramp-high-authorization-boundary/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-must-be-in-place-before-using-ai-with-customer-or-patient-data/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-organizations-must-implement-for-privileged-access-management-under-nist-800-53-rev-5-control-ac-6/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-organizations-must-implement-under-omb-m-24-10-zero-trust-architecture-requirements/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-organizations-must-implement-when-using-ai-to-generate-or-modify-software-code-in-production-systems/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-organizations-must-implement-when-using-generative-ai-with-source-code-or-proprietary-technical-documentation/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-organizations-must-implement-when-using-large-language-models-to-summarize-classify-or-route-customer-communications/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-organizations-must-prepare-for-when-implementing-generative-ai-in-customer-service-and-support/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-organizations-using-ai-for-employment-decisions-must-implement-under-eeoc-guidance-and-state-ai-employment-laws/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-saas-providers-must-implement-under-iso-iec-27001-2022-annex-a-controls-5-23-8-10-and-8-11-for-data-loss-prevention-and-information-deletion/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-saas-providers-must-implement-under-soc-2-criteria-cc6-6-cc6-7-and-cc7-2-for-logging-monitoring-and-incident-response/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-saas-providers-must-implement-under-the-california-consumer-privacy-act-s-right-to-delete-and-verification-requirements/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-saas-providers-must-implement-under-the-ftc-s-standards-for-safeguarding-customer-information/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-state-ai-transparency-and-impact-assessment-laws-require-of-organizations-deploying-automated-decision-systems/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-technology-providers-must-implement-under-the-eu-s-cyber-resilience-act-for-products-with-digital-elements/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-the-eu-ai-act-means-for-organizations-deploying-ai-systems/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-the-ftc-s-september-2024-consent-order-against-amazon-ring-means-for-iot-device-manufacturers/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-the-gsa-s-it-modernization-centers-of-excellence-supply-chain-risk-management-guidance-means-for-federal-contractors/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-the-nist-cybersecurity-framework-2-0-govern-function-means-for-executive-and-board-oversight/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/what-the-nist-post-quantum-cryptography-standards-mean-for-organizations-that-handle-federal-data/ 2026-08-08 monthly 0.6 https://heightscg.com/insights/ccpa-and-cpra-enforcement-in-2024-what-the-california-privacy-protection-agency-has-prioritized-and-what-that-means-for-saas-providers/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/cmmc-2-0-final-rule-what-defense-contractor-leadership-must-decide-now/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/dfars-7012-and-cyber-incident-reporting-what-contractors-must-report-and-to-whom/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/executive-order-14110-and-federal-ai-requirements-what-contractors-and-regulated-entities-must-prepare-for/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/fedramp-and-the-2024-authorization-process-changes-what-cloud-providers-must-now-demonstrate/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/glba-safeguards-rule-2023-what-changed-for-financial-institutions-and-what-leadership-now-owns/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/iso-iec-27001-2022-what-changed-in-the-revision-and-what-it-means-for-certified-organizations/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/nist-sp-800-171-revision-3-what-changed-and-what-defense-contractors-must-reassess/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/nydfs-cybersecurity-regulation-the-2023-amendments-and-what-they-require-of-leadership/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/sec-cyber-disclosure-rules-what-financial-services-firms-must-now-report-and-when/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/soc-2-trust-services-criteria-2022-what-changed-and-what-saas-leadership-must-reassess/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/texas-data-privacy-and-security-act-hb-4-what-it-requires-of-organizations-operating-in-texas-from-july-2024/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/vendor-msp-and-third-party-oversight-what-executive-teams-must-decide/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-broker-dealers-must-now-report-under-regulation-s-p-and-sci/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-community-banks-must-now-implement-under-the-fdic-s-2023-computer-security-incident-notification-rule/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-controlled-unclassified-information-cui-handling-rules-mean-for-government-contractors-beyond-nist-800-171/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-credit-unions-must-now-implement-under-the-ncua-s-2023-cybersecurity-and-incident-response-rule/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-defense-contractors-must-report-under-the-2023-dfars-cyber-incident-reporting-revisions/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-federal-contractors-must-implement-under-nist-sp-800-53-rev-5-for-moderate-impact-systems/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-financial-institutions-must-implement-under-the-federal-banking-agencies-march-2024-interagency-guidance-on-third-party-risk-management/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-financial-institutions-must-report-under-fincen-s-december-2023-bank-secrecy-act-cyber-event-notification-proposal/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-healthcare-organizations-must-do-when-implementing-ai-in-clinical-or-administrative-systems/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-healthcare-organizations-must-implement-under-the-aha-s-november-2023-cybersecurity-threat-landscape-update-and-joint-cybersecurity-advisory/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-investment-advisers-must-now-report-under-the-sec-s-form-adv-cybersecurity-amendments/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-multi-state-financial-data-privacy-laws-require-of-financial-institutions-in-2024/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-organizations-must-report-under-state-security-breach-notification-laws-in-2024/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-saas-organizations-must-prepare-for-under-california-s-delete-act-sb-362/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-saas-organizations-must-prepare-for-under-the-eu-s-digital-operational-resilience-act-dora/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-saas-providers-must-implement-for-secure-software-development-under-nist-ssdf-and-eo-14028/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-saas-providers-must-now-disclose-under-sec-cyber-rules/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-the-doj-s-may-2024-voluntary-self-disclosure-policy-for-government-contractors-means-for-cybersecurity-incidents/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-the-fcc-s-july-2024-data-breach-notification-rules-mean-for-telecommunications-and-voip-providers/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-the-ffiec-s-november-2023-authentication-and-access-management-guidance-requires-of-financial-institutions/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-the-ftc-s-august-2024-data-breach-order-against-marriott-means-for-data-retention-and-access-controls/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-the-joint-commission-s-january-2024-emergency-management-standard-revisions-mean-for-cybersecurity-and-incident-response/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/what-the-sec-s-april-2024-identity-theft-red-flags-rule-amendments-mean-for-broker-dealers-and-investment-advisers/ 2026-08-07 monthly 0.6 https://heightscg.com/insights/page/2/ weekly 0.3 https://heightscg.com/insights/page/3/ weekly 0.3 https://heightscg.com/insights/page/4/ weekly 0.3 https://heightscg.com/insights/page/5/ weekly 0.3 https://heightscg.com/insights/page/6/ weekly 0.3