The Ultimate Guide to Risk & Compliance
A curated American edition of TechDay news, analysis, interviews, reviews, job moves, and related resources for Risk & Compliance.
What to know about Risk & Compliance
Risk & Compliance is a critical domain encompassing the strategies, tools, and frameworks organisations use to identify, manage, and mitigate risks while ensuring adherence to regulatory standards and internal policies. This area has grown increasingly complex with evolving technology landscapes and cyber threats, making it essential for businesses to stay informed and adaptive.
Recent developments highlight the dynamic nature of risk and compliance, including innovations like AI-powered suites enhancing governance, risk, and compliance (GRC) management, as well as emerging security challenges such as growing API vulnerabilities in financial sectors and the targeting of cloud resources by cyber-attacks. Organisations must navigate an expanding regulatory environment, with new standards and certifications marking benchmarks for data protection, operational resilience, and cybersecurity readiness.
Beyond technology, risk and compliance involve critical considerations around human factors, corporate governance, and the alignment of security practices with business objectives. Insights into cloud governance, supply chain security, and identity management demonstrate the multifaceted approach required to manage risks effectively in a digital-first world.
For readers, exploring stories tagged with Risk & Compliance offers valuable perspectives on cutting-edge solutions, regulatory changes, and strategic guidance. It is an essential resource for professionals aiming to understand and implement robust risk management frameworks, enhance cybersecurity posture, comply with evolving standards, and ultimately safeguard their organisations against the multifarious risks of today’s interconnected environment.
American Risk & Compliance News
Regional stories with direct local relevance
Holiday-Ready Retail: 5 Ways to Improve Customer Data Quality
Cleaner customer records can cut undeliverables, reduce wasted marketing spend and help retailers deliver smoother holiday orders and campaigns.
Report flags short-term ties in US research security
Nearly half of researchers with links to both a restricted entity and a US institution kept their American affiliation for 24 months or less.
Mercury launches payroll service for business customers
Existing customers can set up the service in under 15 minutes, as Mercury folds wage payments, tax filing and benefits into one platform.
OpenAI & ICBA ally to boost community bank cyber defences
Smaller lenders will get subsidised access to OpenAI's defensive cyber tools, plus training, as ICBA seeks to close a widening security gap.
Walmart Business expands TreviPay invoice payments
Eligible buyers can now use net 30-day terms and approved spending controls in stores and online, after a wider rollout from the pilot.
Thomson Reuters launches CoCounsel for tax & audit
US tax and audit teams can now use a workflow that links calculations to source authority, aiming to cut manual review and drafting time.
Analyst Insights
Research and market analysis connected to Risk & Compliance
Provenir named major player in IDC decision intelligence
Wrike named Gartner leader for fourth straight year
Nintex launches process tool to tie AI to workflows
Sphera named leader in Verdantix risk intelligence
Flexera & Atlassian tie up to boost AI service data
Featured News
How Harvey AI's next generation deals with Canadian data
Canadian law firms can keep client files walled off, while choosing data storage and processing become key topic for AI in law.
Celonis banking head: Banks want proof before scaling agents
Celonis argues frontier AI models are too generic for regulated banking, urging firms to weigh cost, risk and process gains before scaling deployments.
Interview: Cloudera says AI agents reshape zero trust
Enterprises must update identity controls as software agents generate more requests and need tightly time-limited access to sensitive systems.
UiPath: AI agents force rethink of junior tech roles
Routine junior tasks could soon be handed to AI agents, forcing firms to redeploy early-career staff towards strategic work, UiPath's CEO says.
DesignVerse targets U.S. firms with private cloud AI tools
DesignVerse is targeting U.S. aviation, defence and finance clients with on-premise AI tools as data sovereignty concerns reshape vendor choice.
AI transforming B2B discovery - but human trust endures
AI is changing how B2B buyers make decisions - but an expert warns that it is not a substitute for effective human comms strategies.
Exclusive: ABBYY says AI build costs will drive buying
Enterprises could cut AI spend by up to 80% by shifting document workflows away from custom builds and into standard platforms.
Exclusive: ABBYY launches hybrid AI document models
Enterprises under pressure to curb AI risk and cost are being given a hybrid option that blends generative models with OCR and rules-based extraction.
Exclusive: Cloudera builds Hadoop-free future platform
Existing customers get six years of support as Cloudera shifts new AI and analytics workloads to a Hadoop-free platform due in November.
Mimecast CEO: Agentic AI threat novel but not entirely new
Hidden AI risks are already widespread in workplaces, with Mimecast saying users are driving shadow tools and most exposure still starts with people.
AI will fade, says Dell Technologies' ephemeral Chief AI Officer
Dell says agentic AI should shift routine tasks below the machine line, freeing staff for expert work while making the role temporary.
Schrodinger's ERP both dead and alive, says Rimini Street
Businesses can avoid costly ERP rip-and-replace projects by layering AI and automation onto existing systems, Rimini Street says.
Lumana's focus on vertical applications for AI video surveillance platform
Lumana's Principal Product Manager says its camera-agnostic AI platform is expanding beyond security into retail, healthcare and smart cities.
CrowdStrike report: AI is rewriting rules of cybersecurity
Organisations now have just 48 hours to patch most flaws, as AI helps attackers weaponise vulnerabilities far faster than before.
Cohesity mitigating shadow AI by empowering staffers
Approved AI tools are cutting shadow use by staff, but Cohesity warns the bigger risk is corrupted enterprise knowledge and weak governance.
Expert Columns
The crown jewels of cybersecurity: What can your business not afford to lose
Holiday-Ready Retail: 5 Ways to Improve Customer Data Quality
Address-Anchored Identity: Why Data Quality Is the Missing Link in eIDV
6 Steps to Get Property Data Ready for Real Estate Technology
The future of iGaming belongs to operators that can scale trust, not transactions
AI moves fast: are you training your people to use it wisely?
Pragmatic modernisation: The disciplines that transform cloud operations
Data Governance in the AI Era: Why One-Off Projects Fail
7 Steps to Implement Digital Identity Verification Successfully
Designing for data sovereignty: Building architectures that keep control where it belongs
Interviews
Interviews and video coverage from the networkRecent Risk & Compliance News
Most firms hide AI work in roles, Oyster report finds
Most firms are failing to update pay and titles as AI duties spread, leaving work reshaped by automation but formally unacknowledged.
Basware customers focus on trust as AI expands in finance
Finance chiefs are demanding more evidence that AI can be trusted in invoice and payment controls, as errors could affect compliance and suppliers.
Sonatype launches Nexus Repository Pro+ for AI screening
It blocks malicious or policy-breaking software and AI artefacts at intake, helping enterprises cut build failures, rework and release risk.
Fortinet launches AI security service for FortiGate
The cloud-delivered offering adds real-time prompt and response inspection to existing firewalls, helping firms curb shadow AI, data loss and runaway spend.
Netrio launches cybersecurity services for mid-market
Mid-sized firms can now buy round-the-clock monitoring, compliance and advisory support from one provider as staffing shortages widen cyber risk.
Google data agent kit automates fraud review pipeline
New payments data can now be pushed from raw logs into a fraud review queue each day, using Google Cloud services and Airflow.
Suppliers back traceability & origin verification
Suppliers are increasingly embracing traceability, with more than 85% saying transparency matters as brands face tougher scrutiny over sourcing claims.
ABBYY launches PHOENIX Plus for document automation
Enterprises can now add generative AI to Vantage workflows as ABBYY targets harder-to-read documents while keeping data within its hosted environment.
Mastercard launches stablecoin security tool with partners
Financial institutions can now screen stablecoin transfers for fraud and sanctions risk before settlement as adoption grows in cross-border payments.
Dext launches AI Connector for accounting practices
The read-only feature lets firms query client cash positions and compliance data in plain language, while keeping records unchanged.
TerraPay links verify service to Kinexys Liink network
The tie-up aims to curb failed cross-border transfers by letting banks check recipient account and wallet details before sending money.
Securonix launches behavioural analytics for AI threats
With AI agents widening the attack surface, security teams need to spot abnormal activity across human and machine users before damage is done.
Darwinium adds AI agent fraud checks across journeys
Fraud teams may struggle to spot AI-driven scams and agent-led abuse as Darwinium moves to assess intent across entire digital journeys.
Interactive urges firms to tighten AI oversight rules
Businesses need tighter controls as AI adoption spreads, with Interactive urging reviews, pre-launch checks and long-term workforce planning.
DigiCert enters FedRAMP Marketplace in certification push
The listing could open the door to US federal agencies for DigiCert's certificate management tools, as it seeks Class C approval under FedRAMP 20x.
DigiCert adds Secure Releases to Software Trust Manager
The update helps teams spot newly exposed releases sooner, tying signing workflows to vulnerability data as software risks change over time.
Alkami adds Carleton compliance checks to MANTL lending
The tie-up could speed approvals for banks and credit unions while reducing rekeying errors and compliance risk in loan origination.
Zema Global adds SatYield satellite crop forecasts
The tie-up could help traders spot shifts in US and Brazil corn and soy supply before official estimates are updated.
ActiveViam partners Databricks on real-time risk analytics
Banks can now run repeatable risk calculations inside Databricks without moving data out, keeping audit trails and governance controls intact.
Tanium teams with NVIDIA to manage local AI endpoints
IT teams gain patching and compliance controls for NVIDIA's local AI systems as Tanium extends its endpoint platform beyond standard PCs.
Job Moves
iCOUNTER appoints Mark FitzPatrick as Chief Financial
Convera names four executives to drive global platform
Doppel names ex-Xerox exec as Chief Security Advisor
Thrive appoints John Toney as security services chief
Manifold Security appoints Joe Sullivan to its board
Forcepoint appoints Vincent Merlin as Marketing Chief
Coinme appoints Chief Compliance Officer for global push
Zingtree appoints Venkat Iyer as Chief Technology Officer
Ondaro promotes three to vice president in ServiceNow shift