Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
3,478 matching stories — announcement, in GRC & Compliance Automation — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Exiger has been named a Top Tech provider in Risk Management in The Hackett Group’s Fall 2026 SolutionMap, earning independent validation based on detailed capability assessments, product demonstrations and verified customer ratings. The post Exiger Named Top Tech in Risk Management by The Hackett Group appeared first on Exiger.
Feeling the pressure of leading a security team? Learn how the Risk Operations Center reduces risk and automates compliance to prove your security posture.
GovRAMP is not simply FedRAMP for state government. The real opportunity is more strategic: build one NIST 800-53-centered assurance program that can support public-sector procurement, FedRAMP reciprocity planning, CJIS conversations, SOC 2 customer assurance, PCI DSS segmentation, HIPAA safeguards, IRS 1075 data protection, and defense-sector overlays without restarting the audit process each time a buyer […] The post GovRAMP: 7 Cloud Compliance Wins with Lazarus Alliance appeared first o
SOC 2 AI controls are no longer an optional appendix to a traditional audit. In 2026, AI governance, cloud-control inheritance, privacy compliance, and multi-framework assurance are converging into one evidence problem: can your organization prove that trust services controls operate continuously across data, models, vendors, and infrastructure? Continuum GRC helps security and compliance leaders modernize […] The post 7 SOC 2 AI Audit Wins with Continuum GRC Risk Management appeared first
Compare NIST 800-53 vs. NIST 800-171 by scope, structure, and use case to choose the right framework. The post NIST 800-53 vs. NIST 800-171: A Complete Guide to Understanding Their Differences and Applications appeared first on Scytale.
TL;DR: A CMDB tool stores configuration items, their attributes and the relationships between them as one record of the IT estate. Faddom is best for agentless dependency mapping, Device42 is best for deep hybrid discovery, and ServiceNow CMDB for large platform-wide programs. What Is a CMDB Tool and Why Is It Critical for Enterprise IT? […]
A risk register can tell an organisation what its risks looked like at the time of the last assessment. It cannot, by itself, show whether the conditions surrounding those risks have changed since then. Customer complaints may be increasing. A critical supplier may be missing more service targets. Staff absence may be placing additional pressure […] The post Key Risk Indicators Explained: How to Spot Changing Risk Before It Becomes an Incident appeared first on Symbiant.
Significant cybersecurity M&A deals announced by Dragos, IBM, Palo Alto Networks, Kiteworks, and Upwind. The post Cybersecurity M&A Roundup: 39 Deals Announced in September 2026 appeared first on SecurityWeek.
Key Takeaways AI-Powered GRC In 2026 Talk about good timing. Just as teams were starting to feel like GRC had become too complex to manage by hand, in walked the AI fairy. Regulations are multiplying. Vendors, systems, frameworks, evidence requests, and internal workflows are all producing more data than most teams can manually sort, connect, […] The post 8 Best AI Powered GRC Tools in 2026 appeared first on Centraleyes.
For most organizations, penetration testing follows a familiar calendar. A test is scoped in the spring, executed over a couple […] The post Continuous vs Annual Penetration Testing: What Changes With AI appeared first on Network Intelligence.
You know a security control is working when current evidence, read from the system that enforces it, passes a test against the state the control should be in. This article explains what working means, the 5 kinds of change that break controls, how to tell a control failure from an evidence failure, and how to check without waiting for the next audit. The post How Do You Know Whether Security Controls Are Actually Working? first appeared on DigitalXForce.
Compliance status says whether an organization met a framework's requirements when it was last assessed, and control effectiveness says whether each control does its job now. This article explains why the two disagree, how a board can tell them apart, and how Continuous Control Assurance (CCA) keeps the second answer current between audits. The post Compliance Status vs Control Effectiveness first appeared on DigitalXForce.
This buyer's guide sorts third-party risk management software into four kinds of product and gives six questions a regulated enterprise can put to any vendor in a demo. The post How to choose third-party risk management software in 2026 first appeared on DigitalXForce.
Almost every organization runs some form of phishing simulation. Far fewer can say whether it has made them safer. The […] The post Phishing Simulation That Actually Reduces Risk: A Practical Guide to Human Risk Programs appeared first on Network Intelligence.
It’s been a long time in the making, but the Cyber Resilience Act (CRA) is finally here. And it couldn’t have come a moment sooner. As AI empowers threat actors to probe for new weaknesses in digital products, and exploit recently published flaws at ever greater speed, there’s an urgent need for vendors to improve … Continued
Healthcare GRC teams need capacity for evidence, remediation, and audit readiness. See how Managed GRC supports execution without adding headcount. The post Why Third-Party Vendors Are Healthcare’s Biggest Cyber Resilience Gap appeared first on Meditology Services.
Healthcare GRC teams need capacity for evidence, remediation, and audit readiness. See how Managed GRC supports execution without adding headcount. The post Why Third-Party Vendors Are Healthcare’s Biggest Cyber Resilience Gap appeared first on Meditology Services.
At a high level, Autonomous Driving System’s (ADS) safety standards are aligned in their intent. Whether in the U.S., Europe, or Asia, the expectation is the same: systems must demonstrate safe behavior across a wide range of real-world scenarios.   But while the destination is consistent, the path to getting there is not. Standards like […] The post AI-Assisted Methodology Scales Compliance of Autonomous Driving Systems appeared first on Foretellix.
Most security programs focus on stopping attackers from getting in. Firewalls, endpoint protection, email security, and perimeter monitoring all work to prevent the initial breach. But the bigger question is: Once an attacker gets inside, how far can they go? That is where lateral movement comes into play. Attackers can use stolen credentials, excessive permissions, […] The post Lateral Movement: The Attack Path Most Security Teams Never Test appeared first on Kratikal Blogs.
AirMDR Growth Is Telling Us Something About the Future of MDR AirMDR has grown quickly over the past 18 months: ARR is up 373%, our customer base is up 186%, and seven of our eight most recent customers switched from another MDR provider. Our NPS is 69, based on responses from 84% of customers since April. See our recent press release for more (link to AirMDR Momentum Press Release).
Written by Rossano Magro, Archer’s Sales Director for South Europe There’s a point in every transformation where the conversation has to shift. The vision has been defined, the technology selected, the business case made. Then comes the harder part: How do you actually make it wo rk across a complex organization? How do you keep […] The post Rethinking GRC Transformation in an AI-Driven World at Archer Summit: Accelerate in Rome appeared first on Archer.
Logging isn't a switch to flip; it's something to tune and maintain. In this blog, we outline a four-step Active Directory logging framework covering log sizing, audit policies, detection goals, and gap analysis.
AI agents are entering production faster than organizations can govern them. According to Deloitte's 2026 State of AI in the Enterprise survey, 74% of organizations expect to be using agents at least moderately by 2027, yet only 21% have a mature governance model for them. Boards want productivity. Security leaders want proof the agents are safe. And every vendor tells its customers that its AI is secure and responsible. The hard question is how anyone verifies that. Collibra has taken a…
Credential harvesting is the moment a phishing attempt turns into a real problem. It’s where a fraudster actually collects a working username and password, ready to use immediately or sell to someone else. Understanding how modern harvesting techniques work and how far they have moved past the fake login page is the first step toward […] The post What is Credential Harvesting, and How Does it Work? appeared first on Sift.
A third-party risk management (TPRM) framework is the structured set of policies, processes, and controls your organization uses to identify, assess, monitor, and respond to risks introduced by vendors, suppliers, and service providers. Several standards and regulations shape third-party risk management, including SOC 2 and ISO 27001 as assurance frameworks, HIPAA for covered entities and…
Discover how SAP leaders navigate cloud migration, reduce technical debt, and secure hybrid SAP landscapes in this SAPinsider benchmark research report. The post Executive Brief: Cloud Architecture for SAP 2025 appeared first on Onapsis.
Discover how SAP leaders navigate cloud migration, reduce technical debt, and secure hybrid SAP landscapes in this SAPinsider benchmark research report. The post Executive Brief: Cloud Architecture for SAP appeared first on Onapsis.
A Virtual Chief Information Security Office (vCISO) can be a huge advantage to community banks, providing expertise and guidance for cybersecurity and compliance goals.
What I think matters right now API management has been reshaped before by a change in who, or what, consumes the API. When mobile apps became the primary front end, the pressure was a surge of new clients and traffic. …
Learn when a data breach requires notification, how reporting obligations vary by jurisdiction, and how to document defensible privacy incident decisions. The post Does Every Data Breach Have to Be Reported? appeared first on RadarFirst.
Learn nine practical AI governance controls that help organizations manage risk, demonstrate accountability, and prove their AI systems are under control. The post Be the Ball: Caddyshack and Proving Your AI Governance is Up to Par appeared first on Riskonnect.
An AI governance platform holds the most complete inventory of confidential material your company has. Here is why regulated buyers want it inside their perimeter, and how Olakai on-prem runs the whole platform on a VM you own. The post Your AI Governance Data Is Sensitive Data. Here’s How Olakai Runs Inside Your Walls. appeared first on Olakai.
Build an AI agent security program that limits machine authority, connects behavior to threat context, and keeps humans accountable. Learn the framework.
The post Exiger awarded $13M U.S. Army software subscription license contract appeared first on Exiger.
  A customer tells you they want off VMware. They have seen the headlines, looked at the latest renewal, and decided it is time to evaluate Nutanix, Proxmox, public cloud,… The post Beyond Renew or Replatform: A Fourth Option for VMware Customers appeared first on 11:11 Systems.
Introduction Not every business or cybersecurity risk can be eliminated immediately. A bank may discover a vulnerability in a legacy application that cannot be patched without disrupting a critical service. An organization may identify a control gap while a replacement system is being implemented. A third-party risk may remain temporarily because remediation requires contractual or... The post Risk Acceptance Process: Criteria, Workflow, Approval & Examples appeared first on ASPIA Infotech.