Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Inside the Early Lessons of DORA Compliance: What Works, What Fails, What's Next?

Jun 25, 2025 By Razorthorn Security In Razorthorn
Six months into DORA — is financial services building real resilience or just ticking boxes? In this episode of Razorwire, host James Rees is joined by Richard Cassidy, Jonathan Care, and first-time guest Romain Deslorieux to dissect how the Digital Operational Resilience Act (DORA) is really playing out in financial services — beyond the policies and into the pressure.
View Video
Feroot

The 10 Most Costly GDPR Mistakes Banks and Financial Institutions Make

Jun 23, 2025 By Feroot In Feroot
Financial services firms operate in a high-risk environment where personal and financial data converge — and errors are expensive. Despite robust back-end controls, many still: GDPR’s complexity — 99 articles and multiple regional interpretations — creates audit friction even for mature teams.
Read Post
tripwire

Brace Yourselves: The Game-Changing Impact of India's DPDP Act, 2023

Jun 16, 2025 By Kirsten Doyle In Tripwire
India's Digital Personal Data Protection (DPDP) Act, 2023 is a turning point in how personal data is regulated, managed, and protected across the country. As every industry becomes more digital, this law makes it clear who owns data and who must protect it. The Act introduces a legal imperative and an operational opportunity for SOC managers, CISOs, DPOs, and IT security teams to revisit how data is collected, stored, shared, and protected.
Read Post
safebreach

Japan's New Active Cyber Defense Law: What It Means for Cyber Resilience and AEV

Jun 12, 2025 By Tova Dvorin In SafeBreach
Japan is the latest country to shift from a reactive to a proactive cybersecurity stance, with its landmark Active Cyber Defense Law. The new regulations passed in May 2025 and are set to take full effect by 2027. For cybersecurity leaders, particularly those in critical infrastructure and the enterprise sector, this legislation marks a turning point—and carries major implications about how we test, validate, and evolve our cyber defenses.
Read Post
bdrsuite

The EU AI Act: What MSPs Need to Know ?

Jun 11, 2025 By Evangelin Sebattini In BDRSuite
The EU AI Act is the most comprehensive law in the world to regulate artificial intelligence. This law doesn’t just apply to organizations inside the European Union, it also affects anyone doing business with the EU or offering AI-powered services in that market. If you use AI tools like ChatGPT, Copilot, Jasper, or Bard for automation, reporting, or client communication, yes, then definitely this applies to you.
Read Post
foresiet

New Cybersecurity Executive Order Redraws Priorities: What It Means for AI, Digital IDs, and Supply Chain Security

Jun 10, 2025 By Foresiet In Foresiet
As the global cyber threat landscape continues to evolve, the latest cybersecurity executive order from the Trump administration is making waves—setting new priorities while reversing some of the cornerstone initiatives from previous administrations. The new directive pivots away from centralized federal control and compliance-heavy practices, placing a sharper focus on AI innovation, post-quantum cryptography, and software security by design.
Read Post
Feroot

CCPA and GDPR: Key Differences in Website Privacy Compliance

Jun 6, 2025 By Feroot In Feroot
The digital privacy landscape is defined largely by two leading regulatory frameworks: the California Consumer Privacy Act (CCPA) and the European Union’s General Data Protection Regulation (GDPR). For businesses with online operations, understanding how the CCPA and GDPR differ is more than just a legal necessity—it’s a strategic imperative.
Read Post
detectify

EU Regulating InfoSec: How Detectify helps achieving NIS 2 and DORA compliance

Jun 3, 2025 By Cecilia Wik In Detectify
Navigating the complex and ever-changing compliance landscape is difficult for many companies and organizations. With many regulations, selecting the appropriate security tooling that aligns with the compliance needs of your business becomes a significant challenge.
Read Post
How NIS2 Is Forcing Companies to Rethink Their Security Architecture

How NIS2 Is Forcing Companies to Rethink Their Security Architecture

May 29, 2025 By SecuritySenses In SecuritySenses
The NIS2 Directive is raising the bar for cybersecurity compliance across the EU, pushing companies to reevaluate and strengthen their entire security architecture. With stricter requirements, broader sector coverage, and hefty penalties for non-compliance, many organizations are feeling unprepared for the level of transparency and resilience now expected. This shift is creating urgent challenges-especially for businesses with fragmented systems, limited incident response plans, or outdated infrastructure.
Read Post
archTIS

Understanding the U.S. Cloud Act: Impact on Compliance, Agreement, and Data Protection

May 28, 2025 By Irena Mroz In archTIS
The complex nature of the U.S. CLOUD Act (CLOUD Act) presents far-reaching implications for global data governance. In this article, we explore how this pivotal legislation is reshaping compliance requirements, transforming privacy frameworks and challenging traditional concepts of data sovereignty, as well as strategies and technologies to ensure compliance.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.