From the Desk
Compliance & GRC
Regulatory updates, compliance frameworks, governance, risk management.
20
Stories filed
3
Desks covered
≥ 6/10
Editorial floor
Coverage:RegulatoryComplianceSecurity
§
On the Compliance & GRC Desk
The latest stories filtered for your beat, organised by sub-section.
Security16 stories
- Iris Ohyama data cloud breach exposes info of 7.7 million customersThis incident highlights GDPR-analogous obligations around data-processor accountability; EU firms with similar supply-chain models should check their own breach-notification readiness.1d
- After Binance, check what your signing systems can approve3d
- The Exceptions That Break MFA Start in the BoardroomUncontrolled MFA exceptions can violate NIS2 management-body accountability requirements and weaken audit evidence for access-control effectiveness.4d
- DigiCert data breach exposes customer information, identity documentsExposure of identity documents by a trusted third party may trigger GDPR notification duties for affected EU customers and raises questions about processor due-diligence.4d
- Why waiting for quantum computers to arrive could leave your security exposedEU regulatory expectations under CRA and sector-specific rules increasingly reference cryptographic resilience; lagging on PQC preparation could become an audit finding.4d
- DreamHost confirms data breach exposed FTP logins and webmail sessions5d
- mSecure password manager hack prompts password reset warningsThird-party password manager breaches trigger vendor-risk reassessment obligations under frameworks like NIS2 and DORA.5d
- Phishing-Resistant Isn't Enough; Yubico Takes Aim at Identity-Verification Gap6d
- Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies3 Nov
- One Compromised Laptop, Billions Lost: The Binance Attack-Path WarningThe breach highlights segmentation and access-control failures that NIS2 and DORA explicitly require essential and financial entities to address—useful as an audit reference case.2 Nov
- Beyond DKIM key rotation: understanding email replay attacks2 Nov
- Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breachA breach exposing 4.9 million Social Security numbers from a government financial aid portal illustrates the catastrophic scale of public-sector data incidents and reinforces the importance of data minimisation and breach notification preparedness.30 Oct
- Undead Software Projects Continue to Raise Security Risks30 Oct
- Binance hack: how a compromised developer laptop can lead to a $6.3 billion breach30 Oct
- British spy agency cannot account for thousands of data storage devices, watchdog saysGCHQ's inability to account for storage devices despite regulatory oversight highlights how even well-resourced organisations can fail basic asset management — a lesson directly applicable to NIS2 and DORA asset inventory requirements.30 Oct
- Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion FrozenThe breach will likely intensify regulatory scrutiny of crypto custodians under MiCA and upcoming EU digital-asset frameworks, affecting compliance obligations for firms with crypto exposure.30 Oct
Regulatory3 stories
- UK Warns Its Critical Infrastructure Faces Grave RiskThe UK's Labour government is explicitly coupling AI risk management with critical-infrastructure protection, creating a regulatory parallel to NIS2 and the EU AI Act that dual-jurisdiction organisations must track.3d
- Watermarking Without Standards Is Not AI GovernanceIf watermarking lacks interoperable standards, enterprises citing it for EU AI Act or CRA compliance may face audit challenges once regulators demand demonstrable attribution effectiveness.3d
- EU AI Act transparency rules show why businesses can’t afford to waitThe EU AI Act's transparency rules impose concrete disclosure obligations; delayed readiness risks regulatory penalties and audit findings.5d