Compliance

Compliance | News, how-tos, features, reviews, and videos

US launches “Shields Ready” campaign to secure critical infrastructure

Shields Ready initiative outlines strategies for preparing critical infrastructure organizations for potential disruption and building more resilience into systems, facilities, and processes.

Nov 8, 2023 3 mins

Compliance Critical Infrastructure Government

AuditBoard adds new AI and analytics capabilities for risk and compliance

With the new AI algorithms, organizations will be able to streamline audit workflows and automate various risk management and compliance programs.

Oct 18, 2023 3 mins

Compliance Generative AI Risk Management

Vanta bakes generative AI into core security and compliance product

New generative AI capabilities are coming to security and compliance vendor Vanta’s main platform, adding a layer of automation to compliance tasks.

Oct 10, 2023 3 mins

Compliance Generative AI Risk Management

Cybersecurity experts raise concerns over EU Cyber Resilience Act’s vulnerability disclosure requirements

Open letter claims current provisions will create new threats that undermine the security of digital products and individuals.

Oct 3, 2023 4 mins

Compliance Laws and Regulations Vulnerabilities

Online Safety Bill passes final parliament debate, set to become UK law

Despite widespread criticism and scrutiny, the UK government is within touching distance of delivering its controversial new internet safety rules.

Sep 20, 2023 3 mins

Compliance Encryption Privacy

Cyber-related False Claims actions are on the uptick

Verizon's $4 million settlement with the US DOJ signals stepped-up action by the Justice Department's Civil Cyber-Fraud initiative.

Sep 18, 2023 7 mins

Compliance Laws and Regulations Security Practices

Security and privacy laws, regulations, and compliance: The complete guide

This handy directory provides summaries and links to the full text of each security or privacy law and regulation.

Sep 12, 2023 48 mins

Compliance Laws and Regulations Security

NIST releases Cybersecurity Framework 2.0 draft

NIST seeks comments ahead of the 2024 release of CSF 2.0, which aims to appeal to a broader range of organizations while elevating the importance of corporate governance and more fully addressing supply chain security.

Sep 12, 2023 7 mins

Compliance Critical Infrastructure Risk Management

How financial institutions can reduce security and other risks from MRAs

Here's advice on avoiding breakdowns or inadequacies in a US financial institution's security and privacy policies and procedures that can trigger a matter requiring attention notice.

Aug 29, 2023 10 mins

Compliance Financial Services Industry Risk Management

Dope Security wants to help CISOs get a handle on shadow IT

Dope's new Extended Shadow IT capability is aimed at cybersecurity and IT teams that want to better track data used by applications and devices that they have not vetted or approved.

Aug 23, 2023 3 mins

Compliance Data and Information Security Privacy