Blog

DPDP, India’s Privacy Law

LLMs - The what, why and how

Large Language Models (LLMs) have revolutionized fields like natural language processing (NLP), powering applications from chatbots to automated content creation. But what exactly goes into creating these models? Why do they sometimes generate incorrect or fabricated responses (hallucinations)? And how can you build your own LLM using an AWS instance? Let’s dive into the mechanics of LLMs, the data and methods used to train them, and practical steps to develop one.

Cyber Insurance Premiums: and Data Security

Cyber insurance is no longer a luxury—it is an essential shield for companies facing increasing cyber threats. However, calculating premiums for cyber insurance is a complex process influenced by numerous variables. Among these, one of the most critical yet opaque factors is understanding and managing third-party data exchanges. This article explores the variables that cyber insurance underwriters use to determine premiums, provides concrete pricing examples, and builds a case for implementing Data Flow Posture Management (DFPM) to lower cyber insurance costs.

Riscosity and Microsoft Azure: A Powerful Partnership for Data Security

We're excited to announce that Riscosity is now available on the Microsoft Azure Marketplace! This partnership brings together Riscosity's cutting-edge data flow security platform with the vast reach and capabilities of Microsoft Azure, offering unparalleled benefits to organizations seeking to protect their sensitive data.

Challenges with Data Security Posture Management (DSPM)

In this article we list out the main concerns and challenges that companies face when evaluating and using DSPM products. We outline some potential solution strategies to effectively overcome these issues.

GDPR and CPRA: A Unified Call for Data Transparency and Accountability

In this article we discuss the two most privacy enteric laws that are very well known across our industry, GDPR and CPRA. We highlight the evolution of these laws and then dive deep into what it means from a security and privacy perspective.

Privacy Engineering is Dead

In this article we discuss what is privacy engineering, how it works in the current landscape of technology and compliance. We discuss the challenges being faced by customers using legacy privacy centric solutions and what they are demanding.

Securing Identities in Business Data Flows

In this article we discuss the problem of discovering and securing machine identities used in business data transactions.

Okta and Long Usernames

This article describes the Okta long username vulnerability and discusses what it is, who is affected, and what users can do to protect themselves against this issue.

API, Identities and solving for the biggest challenges

This article explores the types of identities used in API calls, their implications for security and privacy, and the challenges organizations face in managing them. It builds the case for adopting a Data Flow Posture Management (DFPM) system as the cornerstone of privacy engineering and secure API integration.

FedRAMP Certification and Data Security

This article discusses the implications of FedRAMP and Data security and privacy. How should one think of the intersection of these two roads? What are the specific action items that companies looking to achieve FedRAMP certification should look for - we discuss this in detail in this article.

Investigating iOS 18's AI Capabilities

In this article we discuss iOS 18’s AI capabilities, named, Apple AI - its benefits, risks, and the growing importance of data governance.

Taking the Pain Out Of Compliance for Legal and GRC Teams

In this article, we explore how legal and GRC teams can streamline compliance through collaboration with security, effectively managing data flows and staying ahead of evolving regulatory demands.

LLM Prompt Injection 101

In this article we will list out the common types of prompt injection attacks that are usually low hanging fruit from a testing perspective. These tests can be used to make sure any AI tool using LLM models has some amount of basic security and filtering built in.

How to Safely Integrate LLMs Into Enterprise Applications and Achieve ISO 42001 Compliance

This blog outlines how Riscosity’s platform helps enterprises securely integrate LLMs, addressing key AI risks while streamlining ISO 42001 compliance.

Nigeria Data Privacy Laws and Implications

In this article we present a complete list of all the regulatory laws applying to companies operating in Nigeria and processing information for Nigerian citizens. We highlight the challenges, who it applies to and the strategies to alleviate the pain of compliance.

SEBI’s CSCRF Regulation

This article talks about the new regulation published on Aug 2024, by the Securities Exchange Board of India (SEBI). This new regulation CSCRF aims to tighten the posture from a cybersecurity governance and practice perspective for capital market participants in India.

Introducing The Riscosity AI Governance Suite

Riscosity is thrilled to announce our brand new AI governance suite.

Saudi Arabia's PDPL

This blog article talks about Saudi Arabia’s data privacy and compliance efforts wrapped up in a piece of legislation referred to as the PDPL. We highlight the core components of this law and how does data security and privacy play a key role in complying with the regulatory guidance.

Board Responsibilities for Data Security and Privacy

This blog outlines the responsibilities for corporate boards to make sure their companies stay well away from any failings that would force regulatory audits or fines upon them for non compliance with regulatory guidelines.

Legal Docs Referring to Data Sovereignty

This blog outlines the key legal documents related to data sovereignty, highlighting their importance for enterprises operating internationally. It covers common agreements, critical clauses, and why ensuring compliance with data sovereignty regulations is essential for protecting sensitive information and avoiding legal risks.

Don’t Pass on Combining iPaaS with a DFPM Platform

This blog provides helpful definitions of what iPaaS and DFPM are, the benefits and common challenges of iPaaS, and why data-first and security-centric companies are choosing to combine iPaaS and DFPMs to optimize business efforts.

What is HIPAA and How to Become Compliant

This blog explains what HIPAA is and how organizations can become HIPAA compliant.

Streamline Vendor Risk Management with the New Riscosity and ServiceNow Integration

Introducing Books

Today we’re launching Books, the new way to collect and organize evidence directly in Riscosity. Save hours by using Books to streamline evidence collection and enter audits with confidence.

AI Governance Belongs In Your Organization

GenAI models have become powerful assets due to their ability to introduce efficiency but companies need a stable and robust governance program to protect sensitive information and maintain compliance.

Data Catalogs: What They Are & Why They’re Important

This blog explains what data catalogs are and why they are an important investment

Riscosity Is Now Available on the AWS Marketplace

We’re making it easier for all AWS customers to protect their connected data by gaining continuous visibility and control of all data exchanges.

Data Governance: What It Is, It's Importance, and How To Get Started

What data governance is, why it's important, and how Riscosity enables teams with the control to tailor data governance efforts to specific business needs.

DFPM and DSPM: Two Steps Towards Modernizing Data Security

Data security is evolving and making the need to understand what is going on with your data more critical.

Data Localization: Definition, Benefits, and Challenges

Tapping into the power of data localization starts with understanding what it is, and the benefits and challenges of data localization.

DSPM and DFPM - Friends or Foes

In this article, we’ll discuss Data Security Posture Management (DSPM) and Data Flow Posture Management (DFPM), their similarities and differences, and the value that each one brings.

Vendor Risk Management: Benefits, Process, Software, and Tools

This blog explains the benefits and process of implementing an effective vendor risk management program.

Data Subject Access Request (DSAR): The Meaning, Procedures, and Challenges

A guide to understanding Data Subject Access Request (DSAR): the meaning, procedures, and challenges.

What is Compliance in Healthcare: Definition, Regulations, and Solutions

Healthcare Compliance: importance, laws and acts, and the cost of non-compliance in the healthcare sector.

Secure your code and protect your data flows with Riscosity and Semgrep

Riscosity and Semgrep joined forces to secure code and protect data flows.

A Comprehensive Guide to Open-Source Security

Components, code, and tools in cybersecurity.

Data Security Posture Management (DSPM): The Meaning, Importance, and How it Works

Understand the meaning, importance, and how to implement DSPM.

Riscosity Achieves SOC 2 Type II Compliance

At Riscosity we are committed to maintaining the highest standards of information security.

Keeping a Pulse on All Third-Party Connections

One of the main goals of information security is to protect assets.

Understanding Data Lineage and Data Provenance

In this article, we dive into the differences between data lineage vs data provenance.

The Ins and Outs of Application Security Policy

An application security policy defines acceptable security boundaries.

Understanding Software Licensing Agreements

Addressing ambiguity through automation

How SBOMs and The Digital Supply Chain Converge

Understanding how SBOMs and the digital supply chain converge.

A Guide to GDPR Article 30: RoPA (Records of Processing Activities)

ROPA is a fundamental requirement under GDPR. Explore Riscosity's comprehensive guide on what RoPA is, how to create and maintain a RoPA, and what information a RoPA must include.

Unlocking the Secrets of GDPR Data Mapping: A Comprehensive Guide

Automate the data mapping process to meet General Data Protection Regulation (GDPR) compliance, streamline data processes, and safeguard sensitive information.

Application Risk Assessments: Why They’re Important and How to Perform Them

A comprehensive application risk assessment guide sharing tips and considerations of the process of evaluating and understanding the security risks associated with an application.

What’s new in Riscosity: October

Check out Riscosity's recent product updates!

Secure Third-Party Connections

We’ve Joined Forces With SecurityScorecard to Strengthen Third-Party Security.

Introducing Riscosity’s New Look

We're excited to introduce our new brand identity that better reflects Riscosity as a modern solution built by trusted security and privacy experts.

The key to 21 CFR Part 11 Compliance

The Security Supply Chain plays a crucial role in digital security compliance. This article will explore how the supply chain helps with CFR Part 11 and the steps required to become compliant.

A Guide to Handling the MOVEit Attack

Even with the best of tools and training, people will be subject to criminals exploiting holes in their software supply chains. What gained prominence in the SolarWinds attack (combined with VMWare and Microsoft) three years ago, has grown and exposed not only businesses but also governments worldwide who depend on common third party software services.

ChatGPT and Software Supply Chain Risks

ChatGPT can make life easier, but teams shouldn’t trust LLM tools fully unless they have the right solutions to mitigate risks. Learn how Riscosity's data flow security solution helps to minimize risk.

Software Supply Chain Risk Management

Identifying and Mitigating Risks in ICT (Information and Communications Technology) Software.

3CX Hack Alert: What You Need to Know

The recent hacking incident involving the 3CX Voice Over Internet Protocol desktop application, used by 12 million people across 600,000 companies, has highlighted the growing threat of software supply chain compromises.