Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Latest Posts

TPRM for Government Contractors: General Services Administration Policies

The U.S. General Services Administration (GSA) is an independent agency that helps manage and support the basic functioning of federal agencies. The GSA supplies products and communications, provides transportation and office space, and oversees the government’s real estate portfolio, among other management tasks.

UpGuard Summit March 2024 Recap: Scaling Your TPRM Program

In mid-March, UpGuard welcomed security professionals from APAC, EMEA, India, and the U.S. to participate in the first UpGuard Summit of 2024. This quarter’s event focused on third-party risk management (TPRM), specifically addressing how organizations can scale their TPRM programs to meet their evolving needs and defend their growing attack surfaces.

What is the EU Artificial Intelligence Act?

The European Union (EU) Artificial Intelligence Act is a key landmark legislation that represents one of the first laws to go into effect regarding the application and use of artificial intelligence (AI) technology. This historic regulatory framework was created to govern the use, development, and deployment of AI systems within the EU and establish an operational cyber framework for businesses.

Cybersecurity for the Cayman Islands Monetary Authority's (CIMA)

As the primary financial services regulator of the Cayman Islands, the Cayman Islands Monetary Authority (CIMA) is responsible for managing and protecting the assets of all Cayman Islands banks, which includes its cybersecurity and risk management strategies. CIMA does this mainly through the Rule and Statement of Guidance – Cybersecurity for Regulated Entities, which establishes regulatory laws and guidelines to safeguard the security posture of its regulated entities.

Tackling Patient Data Risks: TPRM for India's Healthcare Sector

India’s healthcare system finds itself at a critical crossroads, struggling to navigate challenges of accessibility, affordability, and quality by pursuing rapid digitization. While this digital transformation provides extensive benefits ranging from greater efficiency to improved quality of care, it also increases the amount of sensitive patient data healthcare organizations store electronically, escalating concerns regarding data privacy and protection.

The Digital Markets Act: Reshaping Tech Competition in the EU

The online platform industry is growing exponentially as more organizations and individuals turn to digital resources for everyday needs. In 2022, the European Union introduced the Digital Markets Act (DMA), a groundbreaking piece of legislation to curb monopolistic practices of major online platforms while promoting fair competition across the highly saturated European market.

What is the PGPA Act 2013? Accountability in the Public Sector

The Public Governance, Performance and Accountability Act 2013 is a key piece of legislation that establishes a framework of governance, performance, and accountability for Australian government and Commonwealth organizations. The PGPA Act’s main goal is to ensure that all government bodies practice effective management of public resources and are transparent in their activities.

Aligning Your TPRM Program with India's E-Commerce Rules

India’s e-commerce industry has surged over the last seven years, increasing its estimated revenue from USD 15.53 Billion in 2017 to USD 63.17 Billion in 2023. This dramatic expansion has shepherded new opportunities for organizations in the e-commerce sector but has also exposed these organizations to increased cybersecurity risks and compliance regulations.

GDPR Compliance: The Critical Role of Data Protection Officers

The General Data Protection Regulation (GDPR) is a comprehensive data protection law covering the European Union (EU) and is widely regarded as one of the world’s strictest privacy regulations. The GDPR unifies data regulation within the EU and provides individuals control over their personal data. The GDPR includes information about Data Protection Officers (DPOs).