Topic

Enterprise

24 articles · enterprise

Enterprise

Operating Across a Half-Transposed NIS2 Map

Twenty-three member states have transposed. Several have not, and seven have been referred to the Court of Justice. Multinational entities are compliance-planning against a moving target.

ROOTKeySep 23, 2026

Compliance 7m

Geofencing and Data Residency: Proving Where Your Data Was Accessed From, Not Just Where It Lives

Residency requirements are usually implemented as a storage decision. Regulators increasingly care about a second question that storage location does not answer.

ROOTKeySep 14, 2026

Compliance 7m

CMMC Phase 2 Is Suspended, Not Cancelled: How European Suppliers Should Spend the Pause

The Department of Defense paused Phase 2 in July and guidance is expected in mid-September. The pause is an opportunity, and the work that pays off either way is evidence work.

ROOTKeySep 8, 2026

Security 6m

ROOTKey September 2026 Update: Restore Center, IP Access Control, and Data Classification

This month's releases are about control: getting deleted things back, deciding who can reach what from where, and labelling data so the platform can enforce the difference.

Ricardo DavidSep 7, 2026

Compliance 6m

Portugal's NIS2 Supervisor Opens Its First Audits: What CNCS Is Actually Checking

Decreto-Lei 125/2025 gave Portugal its NIS2 framework. The audits now beginning are where it gets tested against real organizations.

ROOTKeyAug 26, 2026

Security 6m

Fine-Tuning LLMs on Unverified Enterprise Data: The Compliance Risk Nobody's Underwriting

Every enterprise fine-tuning a model on internal data is making an implicit claim about that data's integrity. Most haven't checked whether the claim is true.

ROOTKeyAug 19, 2026

Compliance 6m

Saudi Arabia's PDPL and SDAIA: What International Companies Must Verify Before Entering the Kingdom

Saudi Arabia's Personal Data Protection Law reaches beyond its borders. If your organization touches data on Saudi residents, it likely applies to you already.

Gonçalo GilAug 13, 2026

Compliance 7m

UAE PDPL and the ADGM Cyber Risk Framework: A Compliance Map for Entering the Gulf Market

Between a national data protection transition, a new financial-sector cyber framework, and a post-quantum mandate, the UAE's regulatory picture in 2026.

ROOTKeyAug 11, 2026

Compliance 7m

CMMC 2.0 Phase 2 Is Coming: What European Suppliers to US Defense Contracts Need to Know

From November 10, 2026, third-party CMMC certification becomes a precondition for contracts involving controlled unclassified information - including for non-US subcontractors.

ROOTKeyAug 10, 2026

Get cyber-resilience insights in your inbox

Practical, audit-ready guidance on data integrity, compliance and continuity - delivered as we publish.