Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Supercharging Vendor Risk Management: Vanta acquires Riskey

Today, we're taking a big step toward making trust management even easier for our customers: Vanta has acquired Riskey, a company leading the way in real-time third-party risk monitoring. Their continuous vendor monitoring and alerting will soon be part of Vanta’s Vendor Risk Management product. ‍ Managing vendor risk is more important than ever.

Ensuring Compliance with DORA: How Trustwave Secures Your Databases and Meets Regulatory Standards

The EU’s Digital Operational Resilience Act (DORA) establishes a unified regulatory framework to ensure financial institutions can withstand and recover from IT disruptions. As a cornerstone of operational resilience, secure and compliant database environments are critical to safeguarding sensitive financial data and maintaining regulatory alignment.

Understanding AI compliance and its importance for organizations

As AI capabilities grow, organizations are adopting it for compliance monitoring, risk analysis, and data processing. However, increased use also introduces new risks, making strict regulation essential, especially in sectors where sensitive data is involved—like finance, insurance, and healthcare. Mishandling this information can lead to reputational damage, legal action, or hefty fines.

ISO 42001 & NIST AI RMF: Practical steps for responsible AI governance

As artificial intelligence continues to reshape industries, responsible governance has emerged as a business necessity. Organizations deploying AI face the challenge of maintaining innovation while mitigating risks related to bias, data privacy, security, and transparency. Two major frameworks – ISO 42001 and NIST AI Risk Management Framework (AI RMF)—have been developed to help businesses navigate this balance.

Bret Taylor of Sierra: How to sell to Enterprise Companies as an AI Startup | Frameworks for Growth

In this episode of Frameworks for Growth, Vanta CEO Christina Cacioppo sits down with Bret Taylor, Co-founder and CEO of Sierra, to discuss the evolution of technology, from the early days of cloud at Salesforce, to enterprise-ready AI companies—plus cultural lessons from companies like Google and Facebook, and what it takes to launch successful AI startups today. Bret shares insights from decades at the forefront of tech innovation—including his time as co-CEO of Salesforce and CTO of Facebook—offering advice for founders navigating today’s market and tomorrow’s challenges.

Why measuring your security maturity matters (And how we do it at Vanta)

Security maturity means different things to different organizations, but the one constant is that it needs to be structured. By consistently assessing where you stand and where you need to go against a solid framework, you're able to take what seems like an impossible goal and break it down into achievable and actionable checkpoints that actually move the needle. ‍ The key to making this work isn't just having the right framework but making sure the right stakeholders are involved in the process.

HIPAA violations in 2025: Staff mistakes and vendor blind spots

HIPAA violations don’t always come from malicious attacks or headline-making data breaches. More often, they stem from everyday mistakes, like misdirected emails and vendors that aren’t as secure as they seem. Even small slip-ups can expose protected health information (PHI) and invite major consequences. ‍ In today’s complex compliance landscape, those mistakes are alarmingly common.

HIPAA 2.0, Minimum Viable Hospitals, and Strategies for Cyber Resilience within Healthcare

Welcome to the Data Security Decoded podcast, brought to you by Rubrik Zero Labs. In each episode, we discuss cybersecurity with thought leaders and industry experts, getting their take on trends, themes, and how they see data security evolving. This is a must-listen for security and IT leaders looking to better understand trends shaping data security and how they can achieve cyber resilience.