Tag: NIS2

Cyber Resilience Act raises stakes as Njordium launches tool

Njordium Cyber Group AB has introduced Inspect360 Code, a platform that brings software supply chain security and vulnerability management together, giving organisations a live...

Weak IT general controls put every audit at risk

As regulators tighten expectations on operational resilience, IT general controls (ITGC) are moving from back-office hygiene to board-level concern. These controls underpin the security,...

Why holding data too long could cost EU firms millions

For years, many organisations have treated storage as cheap and deletion as optional. Under European regulation that habit is turning into a compliance problem....

Njordium unites GRC and supplier risk under one roof

Njordium Cyber Group, a Swedish developer of cybersecurity and risk management software, has launched Inspect360 GRC, a platform built to give organisations an always-current...

What TPRM teams must automate and what must stay human

Third-party risk management (TPRM) processes designed for a few dozen vendors rarely decline gracefully as portfolios grow. According to a new eBook from RegTech...

Stale risk registers leave EU firms exposed to regulators

For EU-regulated firms, managing technology risk is no longer just sound practice. Under DORA, NIS2 and ISO 27001, it is a legal or contractual...

Why ‘compliance management system’ means different things

Ask ten people what a compliance management system actually is and expect three different answers, each correct within its own context. According to Copla, the...

What is a GRC framework, and why does it matter now?

Governance, risk and compliance are already present in most organisations, but the difference between running them as a connected system and running them as...

The risk framework regulators actually want to see

Every organisation needs a way to identify risk, score it, decide what to do, and check whether that decision held. According to Copla, that structure,...

Why continuous compliance keeps quietly failing firms

Continuous compliance is often confused with continuous control monitoring, but the two are not the same thing, and the difference is costing firms visibility...

120,000+ FinTech leaders get exclusive industry stories delivered every week