Blog

3
results maching
vendor risks
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Security

The Complexities of AI for Privacy and Compliance Officers

Artificial Intelligence (AI) is transforming enterprises, offering new capabilities in customer engagement, analytics, and decision-making. However, for Chief Privacy Officers (CPOs) and compliance teams, the rapid adoption of AI has introduced significant challenges in maintaining data privacy, ensuring compliance, and upholding governance standards. This article explores the specific challenges AI introduces for privacy and compliance officers, the types of data exchanged with AI tools, and how AI changes reporting and governance requirements. It also highlights why data flow posture management solutions are essential for mitigating these risks.

Latest Posts

Security

The Complexities of AI for Privacy and Compliance Officers

Artificial Intelligence (AI) is transforming enterprises, offering new capabilities in customer engagement, analytics, and decision-making. However, for Chief Privacy Officers (CPOs) and compliance teams, the rapid adoption of AI has introduced significant challenges in maintaining data privacy, ensuring compliance, and upholding governance standards. This article explores the specific challenges AI introduces for privacy and compliance officers, the types of data exchanged with AI tools, and how AI changes reporting and governance requirements. It also highlights why data flow posture management solutions are essential for mitigating these risks.

Security

Decoding Hugging Face Model Metrics: A Guide to Understanding and Interpreting Parameters

Hugging Face is a leading hub for AI models, offering pre-trained solutions for tasks such as text generation, translation, and classification. Each model on Hugging Face comes with detailed metrics and parameters that users must understand to make informed decisions. In this article, we break down key metrics and terms, explain how to interpret benchmark performance, and provide guidance on estimating operational costs with an example using AWS EC2 pricing.

Security

Understanding ROPA: Who, What, Why?

The Record of Processing Activities (ROPA) is a cornerstone of modern data protection and privacy compliance. Mandated by regulations such as the EU’s General Data Protection Regulation (GDPR) and other global data protection laws, ROPA serves as an organizational map of data processing activities. It details what data is processed, for what purpose, where it is stored, who it is shared with, and for how long it is retained. In essence, a ROPA is the living documentation of an organization’s data ecosystem.

Security

The HIPAA to HISAA transformation

This article talks about HISAA, the next iteration of the well known HIPAA - the law the protects patient information in the hands of healthcare providers and more. We discuss what are the proposed upcoming changes and how they affect the patient and healthcare providers.

Security

Understanding Operational Technology (OT) and Its Security Challenges

Operational Technology (OT) refers to the hardware and software used to monitor and control industrial processes, physical devices, and infrastructure. OT systems are prevalent in industries like manufacturing, energy, transportation, and utilities, where they manage critical functions such as assembly lines, power distribution, and rail network operations. Unlike traditional IT systems, OT systems prioritize availability and reliability over all else, given their role in maintaining critical infrastructure.

Security

DPDP, India’s Privacy Law

This article talks about the main privacy protection law in India, The DPDP. We discuss what are the main points that CIOs, CPOs, CDOs need to keep in mind and what are some strategies to succeed without stumbling along the way.

Security

LLMs - The what, why and how

Large Language Models (LLMs) have revolutionized fields like natural language processing (NLP), powering applications from chatbots to automated content creation. But what exactly goes into creating these models? Why do they sometimes generate incorrect or fabricated responses (hallucinations)? And how can you build your own LLM using an AWS instance? Let’s dive into the mechanics of LLMs, the data and methods used to train them, and practical steps to develop one.

Security

Cyber Insurance Premiums: and Data Security

Cyber insurance is no longer a luxury—it is an essential shield for companies facing increasing cyber threats. However, calculating premiums for cyber insurance is a complex process influenced by numerous variables. Among these, one of the most critical yet opaque factors is understanding and managing third-party data exchanges. This article explores the variables that cyber insurance underwriters use to determine premiums, provides concrete pricing examples, and builds a case for implementing Data Flow Posture Management (DFPM) to lower cyber insurance costs.

Product

Riscosity and Microsoft Azure: A Powerful Partnership for Data Security

We're excited to announce that Riscosity is now available on the Microsoft Azure Marketplace! This partnership brings together Riscosity's cutting-edge data flow security platform with the vast reach and capabilities of Microsoft Azure, offering unparalleled benefits to organizations seeking to protect their sensitive data.

Security

Challenges with Data Security Posture Management (DSPM)

In this article we list out the main concerns and challenges that companies face when evaluating and using DSPM products. We outline some potential solution strategies to effectively overcome these issues.

Security

GDPR and CPRA: A Unified Call for Data Transparency and Accountability

In this article we discuss the two most privacy enteric laws that are very well known across our industry, GDPR and CPRA. We highlight the evolution of these laws and then dive deep into what it means from a security and privacy perspective.

Security

Privacy Engineering is Dead

In this article we discuss what is privacy engineering, how it works in the current landscape of technology and compliance. We discuss the challenges being faced by customers using legacy privacy centric solutions and what they are demanding.

Security

Securing Identities in Business Data Flows

In this article we discuss the problem of discovering and securing machine identities used in business data transactions.

Security

Okta and Long Usernames

This article describes the Okta long username vulnerability and discusses what it is, who is affected, and what users can do to protect themselves against this issue.

Security

API, Identities and solving for the biggest challenges

This article explores the types of identities used in API calls, their implications for security and privacy, and the challenges organizations face in managing them. It builds the case for adopting a Data Flow Posture Management (DFPM) system as the cornerstone of privacy engineering and secure API integration.

Security

FedRAMP Certification and Data Security

This article discusses the implications of FedRAMP and Data security and privacy. How should one think of the intersection of these two roads? What are the specific action items that companies looking to achieve FedRAMP certification should look for - we discuss this in detail in this article.

Security

Investigating iOS 18's AI Capabilities

In this article we discuss iOS 18’s AI capabilities, named, Apple AI - its benefits, risks, and the growing importance of data governance.

Security

Taking the Pain Out Of Compliance for Legal and GRC Teams

In this article, we explore how legal and GRC teams can streamline compliance through collaboration with security, effectively managing data flows and staying ahead of evolving regulatory demands.

Security

LLM Prompt Injection 101

In this article we will list out the common types of prompt injection attacks that are usually low hanging fruit from a testing perspective. These tests can be used to make sure any AI tool using LLM models has some amount of basic security and filtering built in.

Security

How to Safely Integrate LLMs Into Enterprise Applications and Achieve ISO 42001 Compliance

This blog outlines how Riscosity’s platform helps enterprises securely integrate LLMs, addressing key AI risks while streamlining ISO 42001 compliance.

Security

Nigeria Data Privacy Laws and Implications

In this article we present a complete list of all the regulatory laws applying to companies operating in Nigeria and processing information for Nigerian citizens. We highlight the challenges, who it applies to and the strategies to alleviate the pain of compliance.

Security

SEBI’s CSCRF Regulation

This article talks about the new regulation published on Aug 2024, by the Securities Exchange Board of India (SEBI). This new regulation CSCRF aims to tighten the posture from a cybersecurity governance and practice perspective for capital market participants in India.

Product

Introducing The Riscosity AI Governance Suite

Riscosity is thrilled to announce our brand new AI governance suite.

Security

Saudi Arabia's PDPL

This blog article talks about Saudi Arabia’s data privacy and compliance efforts wrapped up in a piece of legislation referred to as the PDPL. We highlight the core components of this law and how does data security and privacy play a key role in complying with the regulatory guidance.

Security

Board Responsibilities for Data Security and Privacy

This blog outlines the responsibilities for corporate boards to make sure their companies stay well away from any failings that would force regulatory audits or fines upon them for non compliance with regulatory guidelines.

Security

Legal Docs Referring to Data Sovereignty

This blog outlines the key legal documents related to data sovereignty, highlighting their importance for enterprises operating internationally. It covers common agreements, critical clauses, and why ensuring compliance with data sovereignty regulations is essential for protecting sensitive information and avoiding legal risks.

Security

Don’t Pass on Combining iPaaS with a DFPM Platform

This blog provides helpful definitions of what iPaaS and DFPM are, the benefits and common challenges of iPaaS, and why data-first and security-centric companies are choosing to combine iPaaS and DFPMs to optimize business efforts.

Security

What is HIPAA and How to Become Compliant

This blog explains what HIPAA is and how organizations can become HIPAA compliant.

Product

Streamline Vendor Risk Management with the New Riscosity and ServiceNow Integration

Streamline Vendor Risk Management with the New Riscosity and ServiceNow Integration

Product

Introducing Books

Today we’re launching Books, the new way to collect and organize evidence directly in Riscosity. Save hours by using Books to streamline evidence collection and enter audits with confidence.

Security

AI Governance Belongs In Your Organization

GenAI models have become powerful assets due to their ability to introduce efficiency but companies need a stable and robust governance program to protect sensitive information and maintain compliance.

Security

Data Catalogs: What They Are & Why They’re Important

This blog explains what data catalogs are and why they are an important investment

Company

Riscosity Is Now Available on the AWS Marketplace

We’re making it easier for all AWS customers to protect their connected data by gaining continuous visibility and control of all data exchanges.

Security

Data Governance: What It Is, It's Importance, and How To Get Started

What data governance is, why it's important, and how Riscosity enables teams with the control to tailor data governance efforts to specific business needs.

Security

DFPM and DSPM: Two Steps Towards Modernizing Data Security

Data security is evolving and making the need to understand what is going on with your data more critical.

Security

Data Localization: Definition, Benefits, and Challenges

Tapping into the power of data localization starts with understanding what it is, and the benefits and challenges of data localization.

Product

DSPM and DFPM - Friends or Foes

In this article, we’ll discuss Data Security Posture Management (DSPM) and Data Flow Posture Management (DFPM), their similarities and differences, and the value that each one brings.

Security

Vendor Risk Management: Benefits, Process, Software, and Tools

This blog explains the benefits and process of implementing an effective vendor risk management program.

Security

Data Subject Access Request (DSAR): The Meaning, Procedures, and Challenges

A guide to understanding Data Subject Access Request (DSAR): the meaning, procedures, and challenges.

Security

What is Compliance in Healthcare: Definition, Regulations, and Solutions

Healthcare Compliance: importance, laws and acts, and the cost of non-compliance in the healthcare sector.

Product

Secure your code and protect your data flows with Riscosity and Semgrep

Riscosity and Semgrep joined forces to secure code and protect data flows.

Security

A Comprehensive Guide to Open-Source Security

Components, code, and tools in cybersecurity.

Security

Data Security Posture Management (DSPM): The Meaning, Importance, and How it Works

Understand the meaning, importance, and how to implement DSPM.

Company

Riscosity Achieves SOC 2 Type II Compliance

At Riscosity we are committed to maintaining the highest standards of information security.

Security

Keeping a Pulse on All Third-Party Connections

One of the main goals of information security is to protect assets.

Security

Understanding Data Lineage and Data Provenance

In this article, we dive into the differences between data lineage vs data provenance.

Security

The Ins and Outs of Application Security Policy

An application security policy defines acceptable security boundaries.

Security

Understanding Software Licensing Agreements

Addressing ambiguity through automation

Security

How SBOMs and The Digital Supply Chain Converge

Understanding how SBOMs and the digital supply chain converge.

Security

A Guide to GDPR Article 30: RoPA (Records of Processing Activities)

ROPA is a fundamental requirement under GDPR. Explore Riscosity's comprehensive guide on what RoPA is, how to create and maintain a RoPA, and what information a RoPA must include.

Security

Unlocking the Secrets of GDPR Data Mapping: A Comprehensive Guide

Automate the data mapping process to meet General Data Protection Regulation (GDPR) compliance, streamline data processes, and safeguard sensitive information.

Security

Application Risk Assessments: Why They’re Important and How to Perform Them

A comprehensive application risk assessment guide sharing tips and considerations of the process of evaluating and understanding the security risks associated with an application.

Product

What’s new in Riscosity: October

Check out Riscosity's recent product updates!

Company

Secure Third-Party Connections

We’ve Joined Forces With SecurityScorecard to Strengthen Third-Party Security.

Company

Introducing Riscosity’s New Look

We're excited to introduce our new brand identity that better reflects Riscosity as a modern solution built by trusted security and privacy experts.

Security

The key to 21 CFR Part 11 Compliance

The Security Supply Chain plays a crucial role in digital security compliance. This article will explore how the supply chain helps with CFR Part 11 and the steps required to become compliant.

Security

A Guide to Handling the MOVEit Attack

Even with the best of tools and training, people will be subject to criminals exploiting holes in their software supply chains. What gained prominence in the SolarWinds attack (combined with VMWare and Microsoft) three years ago, has grown and exposed not only businesses but also governments worldwide who depend on common third party software services.

Security

ChatGPT and Software Supply Chain Risks

ChatGPT can make life easier, but teams shouldn’t trust LLM tools fully unless they have the right solutions to mitigate risks. Learn how Riscosity's data flow security solution helps to minimize risk.

Security

Software Supply Chain Risk Management

Identifying and Mitigating Risks in ICT (Information and Communications Technology) Software.

Security

3CX Hack Alert: What You Need to Know

The recent hacking incident involving the 3CX Voice Over Internet Protocol desktop application, used by 12 million people across 600,000 companies, has highlighted the growing threat of software supply chain compromises.

Security

Your Guide to Third-Party Risk Assessments

Third party risk assessments are an essential part of ensuring that a business can protect itself and its customers from any risks these vendors may pose. In this blog post, we’ll discuss best practices and share tips for implementing third party risk assessments successfully.

Subscribe To Our Newsletter

By filling out this form you agree to the terms and conditions in our Privacy Policy.

You’re all set! We hope you enjoy the Riscosity Newsletter.
Oops! Something went wrong while submitting the form.

Secure Data Flows in Minutes

Get a Demo