Compliance

Executive Tabletop Exercises: From Compliance Exercise to Revenue Protection Strategy

Compliance, DFIR, Tips & Tricks /

Executive Tabletop Exercises: From Compliance Exercise to Revenue Protection Strategy 2026-03-19 at 16:56 By Anthony Abell Executive tabletop exercises are commonly positioned as cyber incident rehearsals. They tend to focus on breach containment decisions, regulatory notification timelines, and communications planning. Those elements are necessary; however, they are not what ultimately defines the true risk to […]

Executive Tabletop Exercises: From Compliance Exercise to Revenue Protection Strategy Read More »

What to do in the first 24 hours of a breach

CISO, Compliance, cybersecurity, CYGNVS, data breach, Don't miss, Incident Response, News, strategy, tips, Video /

What to do in the first 24 hours of a breach 2026-03-17 at 07:59 By Help Net Security In this Help Net Security video, Arvind Parthasarathi, CEO of CYGNVS, walks through a 10-step process for handling a cybersecurity breach. The first five steps cover preparation: setting up an out-of-band communication platform, identifying internal stakeholders, selecting

What to do in the first 24 hours of a breach Read More »

Does Anthropic deserve the trust of the cybersecurity community?

Anthropic, Artificial Intelligence, Compliance, cybersecurity, Don't miss, Expert analysis, Hot stuff, Looking Glass Public Relations, News, opinion /

Does Anthropic deserve the trust of the cybersecurity community? 2026-03-12 at 08:35 By Help Net Security The cybersecurity industry runs on trust. The belief that when a vendor says they will behave a certain way, they will, that critical CVEs are in fact critical, or when companies say they’re GDPR compliant, they really are. But

Does Anthropic deserve the trust of the cybersecurity community? Read More »

Airbus CSO on supply chain blind spots, space threats, and the limits of AI red-teaming

CISO, Compliance, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, travel industry /

Airbus CSO on supply chain blind spots, space threats, and the limits of AI red-teaming 2026-03-10 at 08:30 By Mirko Zorz Pascal Andrei, CSO at Airbus, knows that the aerospace and defense sector is facing a threat environment that is evolving faster than most organizations can track. From sub-tier suppliers quietly becoming entry points for

Airbus CSO on supply chain blind spots, space threats, and the limits of AI red-teaming Read More »

Apple iPhone and iPad Cleared for Classified NATO Use

apple, Compliance, Featured, Government, iPad, iPhone, Mobile & Wireless, NATO /

Apple iPhone and iPad Cleared for Classified NATO Use 2026-02-26 at 23:18 By Eduard Kovacs The devices have been added to the NATO Information Assurance Product Catalogue (NIAPC). The post Apple iPhone and iPad Cleared for Classified NATO Use appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Apple iPhone and iPad Cleared for Classified NATO Use Read More »

AI-driven DAST reduces manual setup and surfaces exploitable vulnerabilities

Application Security, Artificial Intelligence, attacks, Compliance, cybersecurity, Data Protection, Don't miss, Features, Hot stuff, News, opinion, security testing, software development, StackHawk /

AI-driven DAST reduces manual setup and surfaces exploitable vulnerabilities 2026-02-26 at 07:35 By Mirko Zorz In this Help Net Security interview, Joni Klippert, CEO at StackHawk, discusses what defines DAST coverage in 2026 and why scan completion does not equal security. She explains how AI-driven DAST testing automates attack surface discovery, supports business-logic testing in

AI-driven DAST reduces manual setup and surfaces exploitable vulnerabilities Read More »

AI’s appetite for data is testing enterprise guardrails

Artificial Intelligence, Cisco, Compliance, cybersecurity, data security, News, Privacy, report /

AI’s appetite for data is testing enterprise guardrails 2026-01-27 at 08:18 By Anamarija Pogorelec Privacy programs are taking on more operational responsibility across the enterprise. A new Cisco global benchmark study shows expanding mandates, rising investment, and sustained pressure around data quality, accountability, and cross-border data management tied to AI systems. Privacy programs grow with

AI’s appetite for data is testing enterprise guardrails Read More »

TikTok Finalizes a Deal to Form a New American Entity

ByteDance, China, Compliance, deal, National Security, Privacy, Risk Management, TikTok, US /

TikTok Finalizes a Deal to Form a New American Entity 2026-01-26 at 14:37 By Associated Press TikTok has finalized a deal to create a new American entity, avoiding the looming threat of a ban in the United States. The post TikTok Finalizes a Deal to Form a New American Entity appeared first on SecurityWeek. This

TikTok Finalizes a Deal to Form a New American Entity Read More »

AWS releases updated PCI PIN compliance report for payment cryptography

AWS, Coalfire, Compliance, News, PCI, PCI DSS /

AWS releases updated PCI PIN compliance report for payment cryptography 2026-01-26 at 07:05 By Anamarija Pogorelec Amazon Web Services has published an updated Payment Card Industry Personal Identification Number (PCI PIN) compliance package for its AWS Payment Cryptography service, confirming a recent third-party audit of the platform. The report package is now accessible through AWS’s

AWS releases updated PCI PIN compliance report for payment cryptography Read More »

Cyber Insights 2026: Regulations and the Tangled Mess of Compliance Requirements

Compliance, CyberInsights2026, Privacy & Compliance /

Cyber Insights 2026: Regulations and the Tangled Mess of Compliance Requirements 2026-01-23 at 15:31 By Kevin Townsend Cyber regulations are where politics meets business – where business becomes subject to political realities. The post Cyber Insights 2026: Regulations and the Tangled Mess of Compliance Requirements appeared first on SecurityWeek. This article is an excerpt from

Cyber Insights 2026: Regulations and the Tangled Mess of Compliance Requirements Read More »

Security leaders push for continuous controls as audits stay manual

Artificial Intelligence, automation, Compliance, cybersecurity, framework, monitoring, News, RegScale, report /

Security leaders push for continuous controls as audits stay manual 2026-01-21 at 07:03 By Anamarija Pogorelec Security teams say they want real-time insight into controls, but still rely on periodic checks that trail daily operations. New RegScale research shows how wide that gap remains and where organizations are directing time, staff, and budget to manage

Security leaders push for continuous controls as audits stay manual Read More »

Privacy teams feel the strain as AI, breaches, and budgets collide

Artificial Intelligence, boardroom, Compliance, cybersecurity, ISACA, News, Privacy, report /

Privacy teams feel the strain as AI, breaches, and budgets collide 2026-01-20 at 07:31 By Anamarija Pogorelec Privacy programs are under strain as organizations manage breach risk, new technology, and limited resources. A global study from ISACA shows that AI is gaining ground in privacy work, with use shaped by governance, funding, and how consistently

Privacy teams feel the strain as AI, breaches, and budgets collide Read More »

Investor Lawsuit Over CrowdStrike Outage Dismissed

Compliance, CrowdStrike, dismissed, Incident Response, lawsuit /

Investor Lawsuit Over CrowdStrike Outage Dismissed 2026-01-14 at 19:20 By Eduard Kovacs A judge has ruled that the plaintiffs failed to demonstrate intent to defraud investors.  The post Investor Lawsuit Over CrowdStrike Outage Dismissed appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Investor Lawsuit Over CrowdStrike Outage Dismissed Read More »

CISO Assistant: Open-source cybersecurity management and GRC

CISO, Compliance, cybersecurity, DevSecOps, Don't miss, framework, GitHub, GRC, Hot stuff, News, open source, Risk Management, software, strategy /

CISO Assistant: Open-source cybersecurity management and GRC 2026-01-14 at 13:25 By Mirko Zorz CISO Assistant is an open-source governance, risk, and compliance (GRC) platform designed to help security teams document risks, controls, and framework alignment in a structured system. The community edition is maintained as a self-hosted tool for organizations that want direct access to

CISO Assistant: Open-source cybersecurity management and GRC Read More »

Passwords are where PCI DSS compliance often breaks down

Compliance, Don't miss, Hot stuff, News, password manager, Passwork, PCI DSS /

Passwords are where PCI DSS compliance often breaks down 2026-01-08 at 07:36 By Sinisa Markovic Most PCI DSS failures do not start with malware or a targeted attack. They start with everyday behavior. Reused passwords. Credentials stored in spreadsheets. Shared logins are passed around during busy periods. For CISOs, password hygiene remains one of the

Passwords are where PCI DSS compliance often breaks down Read More »

What European security teams are struggling to operationalize

Artificial Intelligence, Compliance, cybersecurity, Don't miss, EU, Europe, Kiteworks, News, regulation, report, survey /

What European security teams are struggling to operationalize 2026-01-07 at 08:32 By Anamarija Pogorelec European security and compliance teams spend a lot of time talking about regulation. A new forecast report from Kiteworks suggests the harder problem sits elsewhere. According to the report, many European organizations have strong regulatory frameworks on paper, driven by GDPR

What European security teams are struggling to operationalize Read More »

Passwords are still breaking compliance programs

access control, Compliance, Don't miss, Hot stuff, News, password management, Passwork /

Passwords are still breaking compliance programs 2026-01-06 at 07:32 By Sinisa Markovic The security stack has grown, but audits still stumble on passwords. CISOs see this every year. An organization may have strong endpoint tools, layered network defenses, and a documented access policy. Then the audit turns to shared credentials, spreadsheet-based password storage, or accounts

Passwords are still breaking compliance programs Read More »

New State Laws Impact AI Governance, Risk, and Compliance

Artificial Intelligence, Compliance, Government, News /

New State Laws Impact AI Governance, Risk, and Compliance 2026-01-05 at 18:48 By Scott Swanson New York has started a movement to reshape the AI compliance landscape for companies doing business in the state. Other states are following suit making Governance and AI Compliance an increasingly critical endeavor. This article is an excerpt from LevelBlue

New State Laws Impact AI Governance, Risk, and Compliance Read More »

Pharma’s most underestimated cyber risk isn’t a breach

CISO, Compliance, cybersecurity, data security, Don't miss, Features, Hot stuff, News, predictions /

Pharma’s most underestimated cyber risk isn’t a breach 2026-01-05 at 08:47 By Mirko Zorz Chirag Shah, Global Information Security Officer & DPO at Model N examines how cyber risk in pharma and life sciences is shifting beyond traditional breaches toward data misuse, AI-driven exposure and regulatory pressure. He explains why executives still underestimate silent control

Pharma’s most underestimated cyber risk isn’t a breach Read More »

Understanding AI insider risk before it becomes a problem

Artificial Intelligence, Compliance, cybersecurity, Data Protection, Don't miss, Insider Threat, News, risk, UpGuard, Video /

Understanding AI insider risk before it becomes a problem 2026-01-05 at 07:31 By Help Net Security In this Help Net Security video, Greg Pollock, Head of Research and Insights at UpGuard, discusses AI use inside organizations and the risks tied to insiders. He explains two problems. One involves employees who use AI tools to speed

Understanding AI insider risk before it becomes a problem Read More »

Scroll to Top