NYDFS Cybersecurity Regulation: Dates, Facts and Requirements

NYDFS Cybersecurity Regulation: Dates, Facts and Requirements

Key Takeaways The November 1, 2025, NYDFS cybersecurity deadline, the last phase-in date of the amended Part…
Global Shared Controls

Global Shared Controls

Introducing a Smarter Way to Manage Controls Across Entities Managing controls across entities has always been one…
Harrods Data Breach Explained

Harrods Data Breach Explained

On Friday, September 26–27, 2025 (UK time), Harrods warned that a third-party provider suffered an intrusion that…
10 Essential Elements of an Effective Dynamic Risk Assessment

10 Essential Elements of an Effective Dynamic Risk Assessment

Key Takeaways Static risk assessments no longer keep pace with today’s fast-changing environments. Dynamic risk assessments provide…
Volvo Breach: A Closer Look at the Technical and Organizational Gaps

Volvo Breach: A Closer Look at the Technical and Organizational Gaps

Volvo North America has confirmed a data breach affecting employee records, following a ransomware attack on its…
The Definitive Guide to Compliance Costs: Where Your Budget Goes

The Definitive Guide to Compliance Costs: Where Your Budget Goes

Key Takeaways Compliance costs often grow because of duplicated effort across frameworks, tools, and regions. Consolidating platforms…
Chinese Hackers Breach U.S. Firms as Trade Tensions Rise

Chinese Hackers Breach U.S. Firms as Trade Tensions Rise

A Coordinated Breach Comes to Light CNN reported that Chinese state-linked hackers infiltrated several U.S. legal and…
What Makes an AI Governance Framework Effective?

What Makes an AI Governance Framework Effective?

Key Takeaways AI oversight efforts often stay fragmented across teams, but a framework ties them together into…
SonicWall Confirms Unauthorized Access to MySonicWall Backup Files

SonicWall Confirms Unauthorized Access to MySonicWall Backup Files

SonicWall confirmed yesterday that configuration backups stored in some MySonicWall customer accounts were accessed without authorization in…

South Korea Personal Information Privacy Act

What is South Korea PIPA? The Personal Information Protection Act (PIPA) is South Korea’s principal data protection…

Washington My Health My Data Act (MHMDA)

What is the Washington My Health My Data Act? The Washington My Health My Data Act (MHMDA)…
Navigating Your Audit: 6 Important Questions to Ask Your Auditor

Navigating Your Audit: 6 Important Questions to Ask Your Auditor

Audits are a cornerstone of security and compliance programs. They validate the strength of your controls and…
Jaguar Land Rover Confirms Data Breach After Cyberattack Disrupts Global Operations

Jaguar Land Rover Confirms Data Breach After Cyberattack Disrupts Global Operations

Jaguar Land Rover has confirmed that a recent cyberattack has resulted in a data breach, following weeks…
GDPR Compliance Checklist: A Practical Guide for Businesses

GDPR Compliance Checklist: A Practical Guide for Businesses

Key Takeaways Can you map data flows in real time? Does your RoPA reflect live systems? Do…
Understanding the EU Corporate Sustainability Due Diligence Directive (CSDDD): Why It Matters and How to Prepare

Understanding the EU Corporate Sustainability Due Diligence Directive (CSDDD): Why It Matters and How to Prepare

Key Takeaways CSDDD became law in July 2024, with compliance phasing in from 2027 to 2029. It…
Behind the Salesforce OAuth Drift Breach

Behind the Salesforce OAuth Drift Breach

In recent weeks, major companies like Palo Alto Networks, Zscaler, Cloudflare, and SpyCloud have all confirmed they…
How to Create (And Maintain) an AI-Powered Risk Register That Drives Governance

How to Create (And Maintain) an AI-Powered Risk Register That Drives Governance

Key Takeaways AI-powered risk registers cut out manual work and keep risks continuously aligned with reality. Inherent…
Hackers Threaten Google Following Data Exposure

Hackers Threaten Google Following Data Exposure

A recent breach involving a third-party Salesforce system used by Google has sparked an unusual escalation. Although…
Building a Risk-Based Compliance Program: Step-by-Step Guide

Building a Risk-Based Compliance Program: Step-by-Step Guide

Key Takeaways Learn what a compliance program is and why a risk-based one is different. See the…
TransUnion Data Breach Exposes 4.5 Million Records Through Third-Party App

TransUnion Data Breach Exposes 4.5 Million Records Through Third-Party App

TransUnion, one of the nation’s three major credit reporting agencies, has confirmed a cyberattack that exposed sensitive…
FBI Issues Updated Warning on Salt Typhoon’s Global Cyber-Espionage Operations

FBI Issues Updated Warning on Salt Typhoon’s Global Cyber-Espionage Operations

The FBI has released new findings on a long-running cyber campaign that quietly infiltrated major U.S. telecommunications…
How to Implement a Robust Enterprise AI Governance Framework for Compliance

How to Implement a Robust Enterprise AI Governance Framework for Compliance

Why AI governance needs a framework AI systems are embedded into business decisions, public services, and high-risk…
The Relationship Between CMMC and DFARS

The Relationship Between CMMC and DFARS

Key Takeaways DFARS is the legal requirement; CMMC verifies you followed it. Both are built on NIST…
Cloud Controls Matrix (CCM): Guide to Cloud Security Compliance

Cloud Controls Matrix (CCM): Guide to Cloud Security Compliance

Key Takeaways Cloud security needs a purpose-built framework, and CCM delivers exactly that. CCM simplifies vendor assessments…
Apache ActiveMQ Breach Reveals Unusual Attacker Behavior

Apache ActiveMQ Breach Reveals Unusual Attacker Behavior

Security researchers have confirmed that a recent wave of cyberattacks is exploiting a critical vulnerability in Apache…
Ransomware Disrupts Inotiv Operations

Ransomware Disrupts Inotiv Operations

Inotiv, a pharmaceutical research and drug development company based in Indiana, has disclosed a ransomware attack that…
The 9 Types of PCI SAQs and Applicability

The 9 Types of PCI SAQs and Applicability

Key Takeaways Accuracy is critical. Choosing the wrong SAQ or underreporting scope can lead to compliance gaps…
Workday Confirms Data Breach Tied to Salesforce Attacks

Workday Confirms Data Breach Tied to Salesforce Attacks

A New Corporate Victim in a Broader CRM Exploitation Campaign Workday, one of the world’s leading human…
State Privacy Laws That Took Effect in 2025: All 8 Dates

State Privacy Laws That Took Effect in 2025: All 8 Dates

Eight new comprehensive state privacy laws took effect in 2025: Delaware, Iowa, Nebraska and New Hampshire on…
Nvidia and AMD Agree to Revenue Share with the US as Security Scrutiny Intensifies

Nvidia and AMD Agree to Revenue Share with the US as Security Scrutiny Intensifies

Nvidia and AMD have reportedly reached an unprecedented agreement with the United States government to pay 15…
Skip to content