Compliance

Compliance | News, how-tos, features, reviews, and videos

New SEC rules give companies four days to report cyber incidents

The new SEC rules also require registrants to report ransomware payments within 24 hours to report ransomware payments and to submit annual cyber risk management, strategy, and governance reports.

Jul 26, 2023 11 mins

Compliance Laws and Regulations

Why and how CISOs should work with lawyers to address regulatory burdens

As the scope of cybersecurity related regulations grows, CISOs may need to partner more closely with legal teams to understand the changing requirements.

Jul 19, 2023 11 mins

Compliance Laws and Regulations Risk Management

Only half of organizations “very prepared” to meet global data privacy laws

Cybersecurity is the number one data privacy concern for global businesses as AI and biometrics increasingly play into the data privacy law equation.

Jul 18, 2023 8 mins

Compliance Laws and Regulations Privacy

Implementation plan turns US National Cybersecurity Strategy into concrete objectives

The administration released its much-awaited implementation plan for the National Cybersecurity Strategy, offering a roadmap for how it plans to turn high-level cybersecurity goals into concrete steps.

Jul 14, 2023 6 mins

Compliance Critical Infrastructure Government

Industry groups call for changes to EU Cyber Resiliency Act

Recommendations aim to improve cybersecurity and resilience while addressing key concerns about the current EU Cyber Resiliency Act proposal.

Jul 13, 2023 6 mins

Compliance Laws and Regulations Security

TrustCloud adds new tools to automate GRC frameworks

The suite of new capabilities includes framework customization with AI, new APIs, and evidence-collection integrations.

Jul 6, 2023 3 mins

Compliance IT Governance

Resilience at the core of the current and future Biden administration cybersecurity plans

The Biden administration's cybersecurity initiatives broadly aim to improve cybersecurity resilience, with recent regulations and other actions designed to foster a "defensible, resilient ecosystem."

Jul 5, 2023 7 mins

Compliance Government

No consensus on creating a unified US cyber incident reporting framework

Comments submitted to CISA regarding its creation of cyber incident and ransom payment reporting requirements underscore how tough it will be for the agency to create a one-size-fits-all framework.

Jun 29, 2023 10 mins

Compliance Laws and Regulations Ransomware

Meta fined $1.3B for violating EU GDPR data transfer rules on privacy

The Irish Data Protection Commission has levied a record-breaking fine against Facebook's parent company, Meta, for transferring data to the US without data privacy safeguards.

May 22, 2023 4 mins

Compliance Laws and Regulations Privacy

Vanta adds new SaaS capability to address growing concerns over vendor security

Vanta’s new offering aims to help customers streamline third-party security with automated workflows for vendor security reviews and compliance.

May 3, 2023 3 mins

Compliance Risk Management Vendor Management