10 articles and related resources
Zscaler enhances its Zero Trust Exchange™ platform to bolster data sovereignty, enabling enterprises to comply with global regulations without compromising perf
The GSA's updated IT Security Procedural Guide mandates NIST SP 800-171 Rev 3 compliance, introducing stringent cybersecurity requirements for contractors.
NIST publishes final Quick-Start Guide for Cybersecurity Framework 2.0, aiding organizations in implementing updated cybersecurity practices.
The 2026 amendments to the NIS2 Directive introduce harmonized cybersecurity controls, refined sector definitions, and enhanced reporting requirements, necessit
NIST is revising its IoT cybersecurity guidance as the EU's Cyber Resilience Act enforcement approaches, signaling a global shift towards stricter IoT security
NIST has released a draft AI Cybersecurity Framework for public comment, aiming to address unique AI-related security risks. Feedback is open until January 30,
The EDPB and EDPS jointly support EU proposals to enhance cybersecurity while safeguarding personal data, emphasizing balanced measures and clear certification
With the NIS2 Directive's compliance deadline nearing, EU organizations in critical sectors are intensifying efforts to meet stringent cybersecurity requirement
The EU's Cyber Resilience Act, adopted on October 23, 2024, sets new cybersecurity standards for digital products, with phased implementation starting in 2026.
The European Commission proposes amendments to the NIS2 Directive, introducing new cybersecurity obligations and expanding its scope across the EU.
Explore the NIS2 Directive's key provisions and strategies for organizations to achieve compliance and enhance cybersecurity resilience in 2026.
NIST's Cybersecurity Framework 2.0 introduces a new 'Govern' function, enhancing organizational governance and supply chain risk management.
The EU's Cyber Resilience Act introduces stringent compliance requirements to enhance the cybersecurity of digital products and services.
Vietnam's AI Law, effective March 1, 2026, establishes a comprehensive regulatory framework influenced by EU and Asian standards, impacting AI stakeholders.
An in-depth analysis of the evolving U.S. state privacy laws in 2026, highlighting key differences from GDPR and offering compliance strategies for businesses.
FedRAMP introduces a pilot standard allowing cloud providers to self-host authorization data, aiming to streamline processes and reduce reliance on centralized
NIST releases draft update to Privacy Framework, aligning it with Cybersecurity Framework to enhance privacy risk management.
PCI DSS 4.0.1 introduces critical updates, including universal MFA and enhanced network security controls, with compliance deadlines approaching in 2025.
The EU's Cyber Resilience Act, effective December 2024, mandates stringent cybersecurity standards for digital product manufacturers, ensuring enhanced security
The DoD has finalized the CMMC 2.0 rule, initiating a three-year rollout to enhance cybersecurity across the Defense Industrial Base.
Decrypt Compliance has launched a SOC 2 readiness program to help SaaS and cloud technology companies evaluate and enhance their security controls before formal
The 2026 HIPAA Security Rule amendments mandate encryption and multi-factor authentication for all ePHI, requiring healthcare organizations to enhance their sec
Explore best practices for designing SaaS applications that are future-proofed for SOC 2 compliance, ensuring robust security and trust with clients.