BARR Advisory, P.A.

10/19/2026

The BARR team is headed to San Francisco! ✈️

BARR is proud to be sponsoring 2026. We can't wait to connect with GRC leaders at this exciting event!

Will we see you there? 👀 Stop by our booth or book time on our calendar so we don't miss the chance to connect in person: https://hubs.li/Q04BjbLm0

Not yet registered? Secure your spot: https://hubs.li/Q04Bjbd_0

10/15/2026

📋 How much time is your team spending answering the same security questions over and over again?

For B2B companies, redundant vendor questionnaires are more than an administrative headache. They can drive up operational costs, slow sales cycles, and introduce compliance risks.

The good news? You don’t have to choose between efficient assessments and strong security.
✅ Standardize security responses
✅ Centralize evidence and documentation
✅ Automate repetitive assessment workflows

Discover how your organization can spend less time repeating answers and more time reducing risk.

🔗 Read our latest blog to learn more: https://hubs.li/Q04Bh-fz0

10/13/2026

How does the NIST AI RMF stand up to ISO 27001? ⚖️

Here’s what you need to know:

1️⃣ The NIST AI RMF is a voluntary, flexible framework for identifying, assessing, and managing AI risks.
2️⃣ ISO 42001 provides a structured, auditable approach for establishing, implementing, maintaining, and continually improving an AI management system (AIMS).
3️⃣ Either framework can help strengthen AI governance, but only ISO 42001 is a formal certification.

We break down all the details on our blog:
https://hubs.li/Q04zBCDG0

10/12/2026

Extra, extra! 🗞️ BARR’s Steven Coppola was featured in a recent article for ITPro, where he gave his take on the importance of taking a proactive approach to data security.

"I love analogies—for pre-emptive security architectures, I use a house,” he said. "Detect and respond is akin to a good alarm and a fast call to the police department. A pre-emptive strategy is thinking ahead about where the doors will go, what they are made of, and whether the valuables need to be in the house at all."

👉 Read the full article here:

Getting ahead of attacks is always better than waiting for an attack and then limiting the fallout – but this is often easier said than done

10/09/2026

What are the CIS Benchmarks? 🤔

Each one focuses on a specific technology or product and provides recommendations for mitigating potential security risks.

We explain more about the purpose of CIS Benchmarks and how to use them in our latest blog post. 👉 Read here: https://hubs.li/Q04zBjLN0

10/08/2026

Today’s the day! 🚨 The BARR team is live at the New England HIMSS Digital Health Conference.

Stop by Booth 14 to connect with our healthcare services leader, Steve Ryan.

See you soon! 👋

10/07/2026

Delivering excellence means constantly raising the bar. 🚀

Members of our team recently gathered in Kansas City for an impactful professional development workshop.

We’re proud to have a culture that prioritizes continuous learning so we can stay at the forefront of our industry and continue delivering expert guidance to the organizations we serve. 🤝

10/06/2026

What should you actually expect when partnering with an MSSP?

Offloading technical complexity to a Managed Security Services Provider is one of the fastest ways to bolster your security and compliance readiness—if you choose the right partner.

Our latest resource covers key expectations every organization should set before onboarding an MSSP, from continuous monitoring to expert-led threat management.

👉 Check out the blog post to learn more: https://hubs.li/Q04zkSk40

10/05/2026

The wait is over!

We can’t wait to connect with healthcare innovators in Worcester, MA this week at the New England HIMSS Digital Health Conference. 🚀

Will you be there? Stop by Booth #14 or set up a time to chat so we don’t miss you: https://hubs.ly/Q04xHlFr0

10/02/2026

Achieving CMMC compliance is a major milestone for defense contractors—but it isn't a one-and-done accomplishment.

To maintain eligibility for defense contracts, organizations must submit periodic affirmations of compliance.

Because affirming officials can be held personally liable for false attestations, accuracy is critical. 👉 We give you all the facts here: https://hubs.li/Q04xzmWH0