Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest News

DORA vs. NIS2 vs. PSD2: Navigating the Evolving Regulatory Landscape

The legal and regulatory landscape is constantly evolving, continually intensifying the demands placed on organizations. As well as meeting the requirements of existing regulations such as the Payment Services Directive 2 (PSD2), companies must contend with the upcoming introduction of the Network and Information Security Directive or NIS2 (Directive (EU) 2022/2555) and the Digital Operational Resilience Act (DORA).

Understanding SOX Requirements for IT and Cybersecurity Auditors

The Sarbanes-Oxley Act (SOX) is a United States federal law that aims to enhance corporate transparency and accountability. Signed into law on July 30th, 2002, the Act came in response to a slew of major corporate accounting scandals, including those involving Enron and WorldCom, that came to light in the early 2000s. Its primary aim is to enhance corporate transparency and accountability, ensuring companies adhere to strict financial reporting standards and maintain effective internal controls.

Global age verification laws: how to maintain compliance and keep friction low

New age verification laws are popping up around the world. Learn what these laws are and how to stay compliant. Kerwell is a product marketing manager focused on Persona’s identity verification solutions. He enjoys watching basketball and exploring the world with his German Shepherd. Kerwell is a product marketing manager focused on Persona’s identity verification solutions. He enjoys watching basketball and exploring the world with his German Shepherd.

Vanta Introduces EU AI Act Support for the Ethical Development and Use of AI in Europe

Providing European companies with support for local regulations and security best practices including the Digital Operational Resilience Act (DORA) and NIS 2. Accelerating European momentum with product enhancements and London office.
Featured Post

What Security Teams Need to Know About the EU's NIS 2 Directive

The deadline to get compliant with the EU's NIS 2 Directive is here. And this isn't just a minor update from its NIS 1 predecessor-it's a major expansion that carries with it new challenges and obligations. The directive now covers a whopping 300,000 organizations, up from just 20,000 under NIS 1. Sectors like aerospace, public administration, digital services, postal and courier services, and food production are now included. Organizations are classified into "essential" or "important" entities based on size and criticality to the economy.

Compliance Cheat Sheet: GDPR vs. CPRA vs. HIPAA vs. SOC

Those who work up close and personal with security compliance standards can always use another tool in their tool belt. So we won’t waste your time. Using this cheat sheet, you can quickly explore the ever-changing requirements and penalties for some of the most significant regulatory compliance standards across the globe. It’s difficult to keep up while meeting data compliance standards, which is why it’s crucial to have a resource for your efforts.

The NIS2 Directive is Here. What Happens Next?

The Network and Information Security (NIS2) Directive’s deadline of October 17th has officially passed. Yet despite this deadline – and the strict penalties in place for non-compliance – nearly 66% of businesses operating in Europe have likely not implemented the necessary compliance controls (Veeam Software). Additionally, the majority of EU member states have yet to officially codify NIS2 standards into their national laws.

A Step-by-Step Guide to DORA Finance Compliance: Practical Advice for Financial Institutions

In the previous post, we explained what the Digital Operational Resilience Act (DORA) is and why it’s crucial for financial institutions and meeting their financial compliance requirements. Now, let’s dive into the steps you need to take to ensure your organisation is fully prepared by the January 2025 deadline.

Cybersecurity Compliance for IT: Key Regulatory Frameworks and Standards

Cybersecurity compliance is crucial for protecting sensitive data and ensuring adherence to global security compliance standards. Protegrity’s comprehensive data security solutions, such as tokenization and dynamic data masking, empower organizations to safeguard their sensitive PII while allowing specific data sets to be protected and maintain compliance with regulations like GDPR, HIPAA rules and regulations, and PCI-DSS.

How Datadog can support your DORA compliance strategy and operational resilience

Reliable access to financial data is critical for organizations and individual consumers alike, making resiliency key for financial institutions responsible for managing this information. While cloud computing can strengthen your app’s resiliency, it can also open up new security risks and require more complex continuity planning.