Compliance Automation Buyer's Guide Tests Eleven Tools
Compares Vanta, Drata and Sprinto on evidence automation and framework support for SOC 2 and ISO 27001.
1
Stories per day · 30 days
8 RSS
Relatedai-agents4compliance3ai-governance2mcp2risk-management2shadow-ai2access-control1access-management1agentic1agentic-ai1agentic-systems1agent-memory1ai-identities1ai-security1anecdotes1automation1autonomous-cyber-defense1autonomous-cyber-weapons1
96 stories, newest first · one card per story
Stories tagged #governance
Anecdotes CEO says GRC managers must learn to govern agents
Kuznitsov argues agents already do control testing, evidence collection and framework mapping, and names three skills.
Half of security leaders report sensitive data exposure through AI tools
47% of security leaders experienced sensitive data exposure via AI tools, many using approved ones.
11 IT and Cyber Risk Management Tools Evaluated in 2026 Guide
Guide assesses 11 platforms on register workflow depth, scoring flexibility, control linkage, reporting, and staffing demands.
1
GRC Platforms Evaluated in 2026 Buyer’s Guide
Eleven platforms including ServiceNow and Archer are reviewed for workflow, configurability, and adoption speed in governance risk compliance.
1
Companies Increase AI Governance Spending
74.5% of respondents report larger cybersecurity budgets, with AI security and governance as the top priority.
BlueFlag expands AI agent governance for developer identities
BlueFlag now maps shadow AI agents and enables automated remediation in the SDLC.
Citrix expands oversight of autonomous browsing and AI agent activity
Citrix adds AI governance to SecurSpaces and SecurAccess for autonomous agents from providers like OpenAI and Anthropic.
Securing the agentic enterprise with data lineage
MIT Technology Review highlights data lineage as the required visibility layer for governing agentic AI workflows without impeding adoption.
Agent runtime security requires layers beyond gateways
AI agent runtime security fails without visibility and governance across platform boundaries, as shown by an employee approving a personal email send from an AI assistant.
Gartner Outlines Four Elements for Exposure Prioritization
Organizations using threat intelligence, asset context, exploitability modeling and control validation can reduce breach likelihood by 70 percent.
Continuous governance replaces periodic reviews for identity security
Organizations should move to continuous identity governance using unified platforms to manage access for human, machine, and AI identities in real time.
1
ThreatAware launches Dimension for governed security apps
Cited research says 77% of security teams used AI coding assistants to build internal tools in the past year.
Paper sets an accountability test for autonomous cyber weapons
On 11 documented operations, none cleared the authors' civilian-target human-control threshold; weights are illustrative.
Vanguard AI lead discusses foundations for scalable AI
The EmTech Future session covers data, platforms, governance and agentic systems in regulated settings.
Paper defines checks between a policy allow and execution admission
An offline review of 72 OPA and Cedar scenarios kept historical failures and did not rerun the engines.
Commentary: AI coding security hinges on adoption maturity, not speed
An eight-stage model from assisted coding to autonomous agents says most developers are still in stages 2 to 4.
1
SecODD adapts vehicle design domains to cyber defense agents
Automated defensive actions would be allowed only when bounded, interruptible, recoverable, and reconstructable from evidence.
SAFE-Mem blocks unauthorized use of LLM agent memory
On MPBench and LoCoMo, attack success was at least 77% below the strongest utility-preserving defense.
Cybersecurity is a leadership problem: Why the management model needs to catch up
A CSO Online essay argues cybersecurity failures persist because governance and CISO authority lag technical progress.
1
QGIS bans AI assisted contributions
A QGIS enhancement proposal would ban AI-assisted contributions to the open-source GIS project.
OpenAI doubles down on decision to fire three AI safety researchers
OpenAI says it fired three safety researchers for mishandling sensitive information, not for raising concerns.
Companies want autonomous IT operations but hesitate to let AI act alone
Survey finds 90 percent of firms want autonomous IT within two years, yet 77 percent will not let AI decide alone.
1
Who watches the AI watching your street?
A Gunma University professor proposes independent audits to deter misuse of street-camera AI.
3