Frameworks, analysis, and guidance across TPRM, supply chain risk, and vendor governance.
Regulatory FrameworksThe Problem: Meeting DORA s Demands With DORA enforceable across the EU starting January 2025, your team has likely updated contracts, documented incident procedures, and classified third-party arrang
Regulatory FrameworksYou ve got 24 hours from awareness to initial report. That s not a planning window, it s an execution deadline. If you re selling products with digital elements in the EU, the Cyber Resilience Act s A
Regulatory FrameworksThe UK government s August 2026 amendments to the Cyber Security and Resilience Bill (CSRB) introduce supplier blocking powers, a direct regulatory intervention into vendor selection for critical infr
Regulatory FrameworksA vendor intake team meeting three weeks after Judge Rita Lin s August 27 ruling overturning Anthropic s supply chain risk designation sparked important questions. The team realized they d been treati
Get weekly security insights and compliance updates delivered to your inbox.
Regulatory FrameworksWhen a federal judge rules that a government agency acted illegally in designating a vendor as a supply chain risk, you re witnessing the consequences of political motivation overshadowing documented
Regulatory FrameworksOverview On August 13, 2026, the European Telecommunications Standards Institute (ETSI) released 17 draft cybersecurity standards. These cover a range of products from operating systems to internet-co
Regulatory FrameworksThe Pentagon s suspension of CMMC Phase II requirements on July 13 doesn t mean your cybersecurity efforts should pause. Instead, you have 60 days to strengthen your security posture before the CMMC R
