Topic
Security
articles.
Beyond the 8-K: Building the Evidence File Before You Have Four Days to Decide Materiality
The SEC gives you four business days after you determine an incident is material. The hard part is the determination, and the record of how you made it.
The FIPS 140-2 Sunset and Why Your Integrity Proofs Need a Crypto Inventory
On 21 September, the remaining FIPS 140-2 certificates move to historical status. The immediate impact is procurement.
You Registered. Now What? Portugal's NIS2 Obligations After the Deadline
Registration closes today. The incident reporting clock, the management accountability provisions, and the supervisory relationship all start tomorrow.
Geofencing and Data Residency: Proving Where Your Data Was Accessed From, Not Just Where It Lives
Residency requirements are usually implemented as a storage decision. Regulators increasingly care about a second question that storage location does not answer.
CMMC Phase 2 Is Suspended, Not Cancelled: How European Suppliers Should Spend the Pause
The Department of Defense paused Phase 2 in July and guidance is expected in mid-September. The pause is an opportunity, and the work that pays off either way is evidence work.
Data Recovery Is Not Data Integrity Verification: What to Check Before You Trust a Restore
A restore that completes without errors proves the copy came back, not that it was right. Seven checks to tell "we recovered" from "we recovered data we can trust".
ROOTKey September 2026 Update: Restore Center, IP Access Control, and Data Classification
This month's releases are about control: getting deleted things back, deciding who can reach what from where, and labelling data so the platform can enforce the difference.
Portugal's NIS2 Registration Deadline Is Days Away: What to Submit on MyCiber and What to Keep
The 60-working-day registration window opened by CNCS closes in mid-September. Registering is the easy part - the evidence you keep afterwards is what an audit will actually test.
The Long Life of a Signature: Post-Quantum Integrity for Records You Must Keep for Decades
Today's signature algorithms may not survive quantum computing, but many records must. How to separate the proof of integrity from the signature and plan the transition.
Can You Tell If an AI Model Was Trained on Tampered Data? A Forensic Approach
After an incident, the question isn't whether the model behaved oddly. It's whether you can prove what it was actually trained on in the first place.
Fine-Tuning LLMs on Unverified Enterprise Data: The Compliance Risk Nobody's Underwriting
Every enterprise fine-tuning a model on internal data is making an implicit claim about that data's integrity. Most haven't checked whether the claim is true.
Inside Germany's NIS2 Enforcement Wave: What the BSI's Formal Orders Reveal
Dozens of formal supervisory orders are already active in Germany. Here is what they suggest about how NIS2 will actually be enforced across the EU.
CMMC 2.0 Phase 2 Is Coming: What European Suppliers to US Defense Contracts Need to Know
From November 10, 2026, third-party CMMC certification becomes a precondition for contracts involving controlled unclassified information - including for non-US subcontractors.
NIS2 Enforcement Tracker: The First Fines Are In, and Four Member States Are Headed to Court
Belgium, Italy, Hungary, and Lithuania have issued confirmed penalties. Ireland, Spain, France, and the Netherlands now face the Court of Justice of the EU.
How Data Poisoning Attacks Actually Work, and Why Signature-Based Defenses Miss Them
Poisoning doesn't look like an attack. It looks like data. That's what makes it effective, and hard to catch after the fact.
Why Data Tampering Is More Dangerous Than Ransomware
Ransomware announces itself. Data tampering does not. And that invisibility is exactly what makes it the more serious threat.
The CISO's Guide to Regulatory Compliance in 2026: NIS2, DORA, and EU AI Act
Three major EU frameworks are now in effect simultaneously. Here is how to manage all three without duplicating your compliance programme.
API Security and Data Integrity: What Every Developer Should Know in 2026
APIs are the attack surface that most enterprises underestimate. This is what data integrity means at the API layer.
Building Cyber Resilience for SMEs: A Practical 2026 Guide
SMEs now represent 43% of all cyberattack targets - this guide shows how smaller organizations can build genuine resilience without enterprise budgets.
Cryptographic Data Fingerprinting in RAG Pipelines: A Technical Guide
Retrieval-Augmented Generation is only as reliable as the data it retrieves. Here is how to verify it.
SEC Cybersecurity Disclosure Rules: What US Companies Must Know in 2026
With the June 2026 compliance deadline now passed, US public companies face active enforcement risk - and board-level cybersecurity accountability is no longer optional.
What Is Cryptographic Data Integrity? A Plain-English Guide
The term is everywhere in compliance and AI governance. Here is exactly what it means, how it works, and why it matters.
NIS2 First Audit Deadline: What European Organizations Must Do Next
The June 30 deadline has passed - here is how to move from reactive compliance to continuous, machine-verifiable evidence.
No articles found. Try a different term.
Explore other categories to find relevant content
Stay in the loop
Cyber-resilience
insights.
Get cyber-resilience insights in your inbox. Practical, audit-ready guidance on data integrity, compliance and continuity, delivered as we publish.