SecurityEU CRA ends manual vuln triage
Security experts say the EU Cyber Resilience Act's 24-hour reporting mandate makes manual vulnerability triage obsolete and forces global vendors to automate or risk losing market access.
> Search
15 results for “compliance”
Security
AI & MLComp AI raises $34M for agentic compliance
Startup bets AI agents will handle security audits and policies, with humans still holding approval power.
SecurityBoards Want Proof Controls Work Now
A CISO argues that point-in-time audits no longer satisfy boards, regulators, and customers who want live proof that security controls are functioning.
AI & MLOllie's Privacy-First Pitch in the AI Assistant Race
Can SOC 2 compliance and a subscription model differentiate Ollie in a crowded AI assistant market?
SecurityCustomer Trust Demands More Than Compliance Checks
Privacy controls fail at system boundaries. Engineers must design for intent propagation, data minimization, and failure.
SecurityNIST Flags Multi-Cloud Security Pitfalls
New NIST report outlines 23 unique challenges in multi-cloud environments, urging community-driven solutions.
Tech NewsCensus 2026: What Australians Need to Know
Australia's 2026 Census is compulsory, with new questions and a AU$364 daily fine for non-compliance.
SecurityBeyond Compliance: Rethinking Cyber Risk
Expert Edna Conway argues that true digital resilience requires moving past checkbox compliance to address complex supply chain risks.
Moving Beyond Heroics in Vendor Risk
Operationalizing third-party risk management requires shifting security involvement to the start of the procurement lifecycle.
SecurityWhy AI Compliance Needs Better Checklists
Current AI security questionnaires often fail to identify real risks, favoring lengthy essays over actionable, evidence-based data.
SecurityPentagon Puts CMMC Audits on Hold
The DoD has suspended mandatory third-party assessments, but experts warn that core legal cybersecurity obligations remain unchanged.
SecurityManaging Hidden Risks in Ad Tech Stacks
Marketing tags often load unvetted fourth-party scripts, creating a security gap that automated systems and AI are rapidly expanding.
SecurityDoD Halts CMMC Phase II Amid Concerns Over Defense Industrial Base
The US Department of Defense has paused critical CMMC security assessment requirements to reevaluate the program's impact on innovation.
SecurityPentagon Halts CMMC Phase 2 Rollout Amid Defense Industry Overhaul
A 60-day review of the CMMC program aims to reduce compliance friction for small firms while maintaining core security standards.
SecurityTwitter's Security Deficiencies Emerge as National Security Risk
A whistleblower report alleges systemic security failures and regulatory non-compliance, sparking intense scrutiny from federal officials.