The Ultimate Guide to Risk & Compliance
A curated American edition of TechDay news, analysis, interviews, reviews, job moves, and related resources for Risk & Compliance.
What to know about Risk & Compliance
Risk & Compliance is a critical domain encompassing the strategies, tools, and frameworks organisations use to identify, manage, and mitigate risks while ensuring adherence to regulatory standards and internal policies. This area has grown increasingly complex with evolving technology landscapes and cyber threats, making it essential for businesses to stay informed and adaptive.
Recent developments highlight the dynamic nature of risk and compliance, including innovations like AI-powered suites enhancing governance, risk, and compliance (GRC) management, as well as emerging security challenges such as growing API vulnerabilities in financial sectors and the targeting of cloud resources by cyber-attacks. Organisations must navigate an expanding regulatory environment, with new standards and certifications marking benchmarks for data protection, operational resilience, and cybersecurity readiness.
Beyond technology, risk and compliance involve critical considerations around human factors, corporate governance, and the alignment of security practices with business objectives. Insights into cloud governance, supply chain security, and identity management demonstrate the multifaceted approach required to manage risks effectively in a digital-first world.
For readers, exploring stories tagged with Risk & Compliance offers valuable perspectives on cutting-edge solutions, regulatory changes, and strategic guidance. It is an essential resource for professionals aiming to understand and implement robust risk management frameworks, enhance cybersecurity posture, comply with evolving standards, and ultimately safeguard their organisations against the multifarious risks of today’s interconnected environment.
American Risk & Compliance News
Regional stories with direct local relevance
Businesses boost AI spending as governance lags behind
Yet fewer than half now have an AI governance policy, as businesses pour more money into transformation projects and agentic AI.
MAVI launches AI finance talent platform for US firms
The service targets a tight hiring market, promising faster placements and lower costs for finance teams struggling to fill skilled roles.
US firms struggle to keep up with software testing
Rising cloud update cycles are leaving many enterprise IT teams unable to verify critical software changes before they hit operations.
Pdq expands api access & integrations across plans
IT teams will be able to automate more routine work as PDQ opens API access across all paid plans and adds new endpoints for custom fields, vulnerabilities and deployment status.
Snyk Evo lifts deals as AI agent security demand surges
Enterprise buyers are spending more to secure AI agents, with Snyk saying Evo now drives 60% of new deals and larger contracts.
Comp AI raises USD $34 million to boost cybersecurity
The funding will help Comp AI expand into continuous monitoring and security testing as software firms face stronger pressure on controls.
Analyst Insights
Research and market analysis connected to Risk & Compliance
SAS launches AI Navigator for enterprise governance
Exabeam adds AI tools for agentic security operations
Plumery launches rescue plan for digital banking exits
Komodor launches agentic operations platform for SRE
NCC Group named in Forrester MDR services landscape
Featured News
Celonis banking head: Banks want proof before scaling agents
Celonis argues frontier AI models are too generic for regulated banking, urging firms to weigh cost, risk and process gains before scaling deployments.
Interview: Cloudera says AI agents reshape zero trust
Enterprises must update identity controls as software agents generate more requests and need tightly time-limited access to sensitive systems.
UiPath: AI agents force rethink of junior tech roles
Routine junior tasks could soon be handed to AI agents, forcing firms to redeploy early-career staff towards strategic work, UiPath's CEO says.
DesignVerse targets U.S. firms with private cloud AI tools
DesignVerse is targeting U.S. aviation, defence and finance clients with on-premise AI tools as data sovereignty concerns reshape vendor choice.
AI transforming B2B discovery - but human trust endures
AI is changing how B2B buyers make decisions - but an expert warns that it is not a substitute for effective human comms strategies.
Exclusive: ABBYY says AI build costs will drive buying
Enterprises could cut AI spend by up to 80% by shifting document workflows away from custom builds and into standard platforms.
Exclusive: ABBYY launches hybrid AI document models
Enterprises under pressure to curb AI risk and cost are being given a hybrid option that blends generative models with OCR and rules-based extraction.
Exclusive: Cloudera builds Hadoop-free future platform
Existing customers get six years of support as Cloudera shifts new AI and analytics workloads to a Hadoop-free platform due in November.
Mimecast CEO: Agentic AI threat novel but not entirely new
Hidden AI risks are already widespread in workplaces, with Mimecast saying users are driving shadow tools and most exposure still starts with people.
AI will fade, says Dell Technologies' ephemeral Chief AI Officer
Dell says agentic AI should shift routine tasks below the machine line, freeing staff for expert work while making the role temporary.
Schrodinger's ERP both dead and alive, says Rimini Street
Businesses can avoid costly ERP rip-and-replace projects by layering AI and automation onto existing systems, Rimini Street says.
Lumana's focus on vertical applications for AI video surveillance platform
Lumana's Principal Product Manager says its camera-agnostic AI platform is expanding beyond security into retail, healthcare and smart cities.
CrowdStrike report: AI is rewriting rules of cybersecurity
Organisations now have just 48 hours to patch most flaws, as AI helps attackers weaponise vulnerabilities far faster than before.
Cohesity mitigating shadow AI by empowering staffers
Approved AI tools are cutting shadow use by staff, but Cohesity warns the bigger risk is corrupted enterprise knowledge and weak governance.
AI arms race forcing businesses to rethink cybersecurity
Security teams are racing to shrink exposure windows as AI makes newly disclosed vulnerabilities exploitable almost immediately.
TrustedTech report warns of 'AI Skills Underclass' gap
Nearly half of U.S. workers lack AI training, widening a skills gap that leaves the most exposed employees to fend for themselves.
Check Point: Be the best, or get out the way
Rising AI-driven attacks are compel security buyers to cut vendor sprawl, though Check Point warns over-consolidation can still raise risk.
.webp)
Check Point: Hackers are already in. Act accordingly
Hackers are exploiting vulnerabilities in hours or minutes, leaving many organisations compromised before defenders spot the breach.
Future of enterprise software is agentic apps, says Oracle
Oracle is targeting a common blocker to AI adoption by adding governance, human checks and audit trails to its agentic app builder.
Agentic rollout creates new identity security challenge
Poor governance is leaving many AI agents stuck out of production, while those that run can expose firms to legal and security risks.
.webp)
OnBoard says board AI policy key, but lags behind in adoption
Most boards are using AI, but formal guidelines are still missing as adoption races ahead of governance, OnBoard's survey found.
John Margerison on the new class of employee: AI managers
Businesses should treat AI like a new hire, as weak oversight could expose sensitive data and leave staff needing fresh skills to stay relevant.
Expert Columns
SOCtoberfest Kickoff: The 7 Deadly Sins of Cybersecurity Meet CISA's Core Steps
The Hidden Risks of Bandwidth Sharing
Trust Before Technology: Why Council ERP Programs Fail Before Go-Live
The next eCommerce interface may not be a screen
How to Recover Value From Data Centre Equipment During a Facility Closure
Stop saying AI hacked the system
Some AI risks more subtle than others
How businesses can avoid widespread harm from cloud outages
Clean data, healthy revenue: The key to improving the patient journey
The Data Problem AI Can't Solve
Interviews
Interviews and video coverage from the networkRecent Risk & Compliance News
AI overtakes legacy replacement in Kyndryl modernisation
Organisations are now prioritising AI over replacing old systems, with Kyndryl finding 98% of respondents have delayed modernisation and suffered setbacks.
Gresham launches AI tool to speed reconciliation controls
Financial firms could cut delays in reconciliation changes as business users build controls without coding and test them before they go live.
Cowbell launches AI risk advisor for policyholders
Small businesses insured by Cowbell can now get AI-guided cyber risk actions in plain English, with human experts on hand when needed.
Moody's and Allvue launch private credit risk model
As private lending swells, investors gain a tool to spot borrower stress sooner, before missed payments or defaults hit portfolios.
Microsoft warns AI is deepening cyber threat links
Threats are now spanning identities, cloud and software supply chains, with AI speeding attacks and complicating defence, Microsoft says.
Walapay raises USD $4.6 million seed funding round
The fresh capital will fund licensing, banking ties and hiring as the payments platform expands direct links across Latin America, Africa and Asia.
OpenAI launches dots, always-on AI agents for work
The new service lets users delegate ongoing work to persistent agents that can act across apps, raising fresh privacy and control questions.
Quorum Cyber to acquire Ontinue in Microsoft security deal
The combined group would give Microsoft customers broader AI-led threat detection and response, with no deal value disclosed.
UltraViolet Cyber launches Equinox to map detection gaps
Security teams can now test whether their tools spot attacks, after UltraViolet Cyber said Equinox can map gaps in under 30 minutes.
Fraudulent hires get credentials before detection, HYPR
Most fake hires are exposed only after getting system access, leaving companies vulnerable for days and often weeks before a fraud is spotted.
IBM Bob gains self-hosted deployment for enterprise AI
The option lets regulated firms keep source code and sensitive data inside their own infrastructure while using AI for software development.
CMOs and CIOs clash over who should own AI decisions
Governance gaps may slow AI deployment as marketing and IT disagree over who controls shared content and platform decisions.
ProSight survey says fraud is now a human problem too
Most losses now stem from weak customer and employee awareness, even as banks pour more money into technology and still struggle to keep pace.
KPMG survey finds AI shift to governance & security
As AI budgets rise to USD $210 million, firms are tightening oversight on security, governance and returns to keep deployments under control.
Drata launches standalone third-party risk tool for vendors
The standalone release aims to cut manual vendor checks as firms face faster AI adoption and increasingly complex supplier risk.
ANYbotics adds door access for ANYmal inspection robots
The upgrade lets inspection robots reach critical plant assets behind locked doors, cutting manual work while keeping security and fire controls intact.
Cybersecurity gap widens in access control controllers
More organisations are treating access control controllers as strategic infrastructure, even as missing cybersecurity features rise to 32% of systems.
BT International wins UBS cloud trader voice overhaul
The bank has begun replacing 20 trading voice platforms with a single cloud system, aiming to cut complexity while meeting strict compliance rules.
Lumicent launches decision platform for industrial risk
Industrial operators could curb downtime and focus maintenance where it matters most as Lumicent links asset data to business risk.
KnowBe4 adds browser extension to curb shadow AI use
The browser add-on gives security teams real-time ways to warn or block staff from sending company data to unsanctioned AI tools.
Job Moves
Doppel names ex-Xerox exec as Chief Security Advisor
Thrive appoints John Toney as security services chief
Manifold Security appoints Joe Sullivan to its board
Forcepoint appoints Vincent Merlin as Marketing Chief
Coinme appoints Chief Compliance Officer for global push
Zingtree appoints Venkat Iyer as Chief Technology Officer
Ondaro promotes three to vice president in ServiceNow shift
Corsha appoints new chief operating & product officers
Lorum appoints Hartwig Gerhartinger as legal chief
