Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

detectify

EU Regulating InfoSec: How Detectify helps achieving NIS 2 and DORA compliance

Jun 3, 2025 By Cecilia Wik In Detectify
Navigating the complex and ever-changing compliance landscape is difficult for many companies and organizations. With many regulations, selecting the appropriate security tooling that aligns with the compliance needs of your business becomes a significant challenge.
Read Post
trustcloud

Automating application and security risk assessments for ServiceNow & Splunk customers

Jun 2, 2025 By Tejas Ranade In TrustCloud
Last week, our CEO, Sravish Sridhar, announced that TrustCloud secured $15 million in new funding from ServiceNow Ventures, Cisco Investments, and others. In his words, the raise “validates the urgent need to modernize GRC for enterprise CISOs and unify CISOs and chief risk officers around a shared view of risk.” The new capital accelerates our mission to automate governance, risk, and compliance for every security team – no matter which system of record they live in.
Read Post
astra

SOC 2 Compliance and Vulnerability Scanning: A Complete Guide

Jun 2, 2025 By Keshav Malik In Astra
With 5+ vulnerabilities being discovered every minute, a SOC 2 (System and Organization Controls 2) compliance certificate demonstrates to customers and partners that the organization is committed to security and adheres to industry best practices for safeguarding data. Apart from customer trust, it can help organizations find and fix security vulnerabilities before attackers can exploit them.
Read Post

Do we need an AI compliance framework?

May 30, 2025 By LimaCharlie In LimaCharlie
Compliance isn’t just a checkbox. It’s the frontline of cybersecurity defense. In this episode of the Cybersecurity Defenders podcast, Joshua Hoffman, Chief Revenue Officer at ControlCase, shares critical insights on the evolving role of compliance in cybersecurity. From frameworks like CMMC and SOC 2 to the rising pressure from new SEC regulations, we examine how organizations can move beyond surface-level audits and adopt a scalable security posture.
View Video
manageengine

Master CIS Benchmark compliance: Simplify network security with automation

May 30, 2025 By akash.mj@zohocorp.com In ManageEngine
As a network admin, balancing optimized configurations with compliance requirements often feels like managing competing priorities. With networks growing more complex every day, achieving and sustaining compliance with the Center for Internet Security (CIS) Benchmarks can feel like a constant uphill battle. However, it doesn't have to be an overwhelming burden. The CIS Benchmarks offer practical, best practice guidelines for securing devices, systems, and applications against evolving threats.
Read Post
Trustwave

Regulations Rising, Risks Persisting: The Cybersecurity Crossroads Facing Australian Hospitality

May 30, 2025 By Craig Searle In Trustwave
The hospitality industry’s cybersecurity posture is approaching an inflection point. Businesses are increasingly having to balance cost pressures in a challenging economic environment, while balancing technological innovation with escalating threats. Australia’s regulatory reforms, including heightened penalties and critical infrastructure protections, provide a framework for resilience; yet enforcement gaps will remain.
Read Post
ignyte Team

DoD Cyber Clause Flowdown: What Suppliers Must Do

May 30, 2025 By Max Aulakh In Ignyte
The Department of Defense DFARS Cybersecurity Clause, more commonly known as the DoD Cyber Clause (or just DFARS 7012), is the long-standing set of rules the DoD has put in place for all members of the DoD supply chain and defense industrial base. It has also spread beyond those boundaries through the use of DFARS 7012 clauses in contracts for other parts of the federal government.
Read Post

API Compliance

May 30, 2025 By A10 Networks In A10 Networks
Most organizations have no idea how many APIs are running in their environment – and that's a significant security problem. In this essential discussion, A10's security experts Akhilesh Dhawan and Jamison Utter tackle one of cybersecurity's biggest blind spots: API compliance and protection. Unlike traditional applications, APIs operate without standardized functionality requirements, creating a regulatory nightmare. This lack of standards renders APIs nearly impossible to govern effectively, making API discovery a mission-critical security function. If you can't see it, you can't protect it.
View Video

Copyright © 2026 OpsMatters™. All rights reserved.