Tag: compliance
373 articles
US Companies Face Record $3.45 Billion in Privacy Fines
US companies are facing a record-breaking $3.45 billion in privacy fines, a staggering amount that surpasses the total fines issued over the past five years combined, as regulators shift from education to full-scale enforcement. This surge in fines is driven by stronger state laws, coordinated interstate efforts, and increased scrutiny of AI and automation practices.
HIPAA Fines Hit $1.7 Million for Risk Analysis Failures
The consequences of neglecting HIPAA risk analysis are steep: four entities recently paid a total of $1.7 million in fines for failing to conduct accurate, timely, and thorough assessments, exposing sensitive health information of nearly 427,000 individuals to hacking and ransomware threats.
DORA Mandates Credential Security as Financial Risk Control
What happens when a threat actor waltzes into your network with a legitimate username and password - can your controls stop them? With DORA now in effect, EU financial institutions must prioritize credential security as a critical risk control, shifting from best practice to binding regulation.
Mythos AI Breakthrough Sparks Industry Reassessment
The Mythos AI breakthrough has sent shockwaves through the industry, forcing a crucial question: how can businesses adapt and stay ahead when a single technological leap turns the rulebook upside down? Industry experts gathered to discuss the implications and reassess their strategies in light of this game-changing innovation.
OpenAI Targets Financial Sector with GPT-5.4-Cyber Partnerships
OpenAI is shaking up the financial sector with its GPT-5.4-Cyber partnerships, targeting major banks with a cutting-edge cyber-focused AI offering that raises important questions about regulation and control. By launching a Trusted Access for Cyber program, OpenAI is paving the way for GPT-5.4-Cyber to be adopted in highly regulated environments.
Universities Scramble to Tighten Export Controls Amid Rising Risks
As governments tighten export controls to protect national interests, universities face a pressing dilemma: how to balance the need for global collaboration and discovery with the risk of unchecked research crossing borders. With regulations once reserved for industry now bearing down on academic activity, institutions must urgently revisit their export-control compliance to avoid stifling innovation.
HHS Weighs HIPAA Security Rule Update Amid Compliance Cost Concerns
As the HHS Office for Civil Rights considers updating the HIPAA Security Rule, a pressing question remains: will the cost of compliance outweigh the risk of leaving protected health information vulnerable? The director bluntly puts it, the cost of inaction may outweigh compliance burdens.
Financial Services Grapple with SecOps and GRC Alignment Challenges
In financial services, two crucial functions - SecOps and GRC - are struggling to move in lockstep, despite their shared goals of protecting assets and meeting regulatory expectations. Can they ever align to tackle security and compliance challenges head-on?
Qodo Raises $70M to Mitigate AI Code Risks with Governance Platform
As businesses increasingly turn to AI to generate production code, a pressing question emerges: who will be accountable when machines write the software that runs our critical systems? With AI-generated code comes a new set of risks - bugs, security threats, and noncompliance - that governance gaps must address to ensure speed and scale don't compromise safety and reliability.
Critical Data Security Standards Bolster Cancer Innovation Efforts
As cancer research and treatment innovation accelerate, robust data security standards are crucial to safeguarding sensitive information and fueling life-saving collaborations. By prioritizing data security, we can empower the medical community to harness the full potential of technology and drive progress in the fight against cancer.
cyber risk Must-Have Strategy for Best Business Alignment
Too many security teams track patch counts while executives ask whether revenue and reputation are really protected; aligning risk operations with business priorities turns cyber efforts from checkbox exercises into measurable protection for what matters most. By mapping critical processes, quantifying financial impact, and uniting tech and leadership, organizations can prioritize controls that reduce real risk and keep operations—and customers—running.
insider risk: Essential Defenses Against Costly Breaches
Insider risk is now a frontline threat—77% of organizations have suffered data loss—so prioritize least-privilege access, zero-trust IAM, and integrated DLP/UEBA/SIEM while building a people-first culture that balances privacy with protection. These must-have defenses stop costly breaches before trusted channels become exit ramps.
staff burnout: Risky Crisis, Must-Have Fixes
When the people charged with defending systems are exhausted, response slows and risk balloons — a new Security magazine-backed report finds burnout now tops leaders’ threat lists. Treating burnout as a strategic vulnerability, not an HR problem, means investing in humane workflows, smarter automation, and retention before talent drains create gaps attackers can exploit.
cyber risk management: Must-Have Best Legal Defense
Cyber incidents aren’t just IT headaches — they’re legal minefields that can trigger fines, lawsuits and boardroom liability. Align contracts, AI governance, vendor controls and BYOD policies so technical breaches don’t become costly legal crises.
zero trust Must-Have: Europe’s Best Security Playbook
Across Europe, zero trust has moved from IT theory to a regulatory expectation—policymakers now expect identity-centric controls, measurable resilience and risk reporting, so organizations must re-architect defenses or accept growing exposure. Start pragmatically: protect your highest-value assets with IAM, MFA and segmentation, measure risk reduction, and build privacy-preserving telemetry as you go.
calendar invite Shocking Leak: Risky Trust Damage
A misconfigured Outlook calendar invite from Cifas accidentally exposed dozens of fraud-prevention professionals’ email addresses — a simple slip with potentially serious consequences. It’s a wake-up call that default-private settings, group aliases and basic training aren’t optional if we want to protect the people who protect us.
Data minimisation: Stunning GDPR Win Against Experian
The Dutch data watchdog fined Experian €2.7m for collecting and keeping more personal data than necessary, a sharp reminder that GDPR’s data‑minimisation rules aren’t optional. The ruling signals that data brokers and businesses must justify every data point they hold — or face stricter enforcement that could reshape product design, retention policies and privacy controls.
Cryptocurrency ATMs: Risky Reality, Must-Have Alerts
Cryptocurrency ATMs offer quick, cash-to-crypto convenience—but their speed and perceived anonymity make them prime tools for scammers and regulatory headaches, so investors should scrutinize fees, compliance, and fraud controls before betting on the sector.
penetration testing: Must-Have Tips to Avoid Risky Costs
Passing a pen test feels great — until the invoice arrives and the same vulnerability makes the headlines, exposing whether you paid for real security or just a shiny compliance report. Treat testing as continuous, threat-informed risk management: scope by business impact, budget for remediation and retesting, and combine automated checks with expert red teams to avoid costly surprises.
Capita fined £14m: Shocking Risky Wake-up Call
When the company you trust with your data leaves the front door ajar, millions can pay the price — Capita was fined £14m after a 2023 breach exposed 6.6 million records, a sharp reminder that outsourcing data demands airtight security and clear accountability.
full-lifecycle COTS AI: Stunning, Risk-Reducing Choice
When time, budget and national‑security stakes won’t wait, full‑lifecycle COTS AI lets agencies field proven capabilities fast while offloading sustainment, security and compliance. By cutting delivery time, lowering program risk and offering predictable lifecycle costs, these platforms free teams to focus on mission outcomes instead of reinventing the plumbing.
artificial intelligence risk: Essential, Costly Warning
UK firms are feeling the sting of unmanaged AI — EY finds an average hit of £2.9m per organisation from faulty models, data breaches and regulatory slip-ups. It’s a wake-up call: invest in governance, oversight and clear accountability now or watch innovation turn into costly disruption.
Microsoft 365 Education Risky: Stunning GDPR Alert
An Austrian regulator has ruled Microsoft 365 Education illegally tracked pupils, a landmark GDPR decision that could force cloud giants to adopt privacy-by-default settings and clarify who’s truly responsible for protecting kids’ data. Parents and schools deserve tools that safeguard students without breaking classroom tech.
Ofcom fines 4chan: Stunning Risky Precedent
Ofcom’s £20,000 fine for 4chan is a warning shot — the start of a bigger fight to keep kids safe online that could force anonymous boards to choose between protecting users or preserving unchecked freedom.