Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Agentic Trust Controls started as an open-source project to help teams manage AI agent risk. The community helped shape it, and now, we’re bringing it into Vanta. With mapped tests and documents, teams can put ATC into practice and demonstrate what’s working, on its own or alongside frameworks like ISO 27001 and ISO 42001. Thank you to everyone who contributed. Here's to the next chapter of ATC!

Becoming the board-ready CISO: Alyssa Miller on what boards actually want from security, and a three-part framework any CISO can use to align security with business objectives. CISO and Board Advisor Alyssa Miller joins TrustCloud CEO Sravish Sridhar to challenge the idea that “security first” is the right frame, and to lay out how strategic CISOs report to the board: mapping security to business objectives and KPIs, focusing on the few resilience goals that matter, and making the case for new investments like AI as business value, not just risk.

Is your financial organisation prepared for the EU Digital Operational Resilience Act (DORA)? A DORA gap assessment helps financial entities identify weaknesses in their ICT risk management framework and understand what needs to be improved to meet applicable regulatory requirements. In this 60-second YouTube Short, VISTA InfoSec explains 5 essential areas to evaluate: ICT Risk Management – Governance, security controls, ICT assets and business continuity.

Can your ICT vendors put your DORA compliance at risk? Even with strong internal cybersecurity controls, third-party ICT providers can introduce operational resilience risks that financial institutions cannot afford to overlook. Under the Digital Operational Resilience Act (DORA) financial entities must establish effective ICT third-party risk management practices, including vendor oversight, due diligence, contractual arrangements, ongoing monitoring and appropriate contingency planning.