Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Feroot

CCPA and GDPR: Key Differences in Website Privacy Compliance

Jun 6, 2025 By Feroot In Feroot
The digital privacy landscape is defined largely by two leading regulatory frameworks: the California Consumer Privacy Act (CCPA) and the European Union’s General Data Protection Regulation (GDPR). For businesses with online operations, understanding how the CCPA and GDPR differ is more than just a legal necessity—it’s a strategic imperative.
Read Post
detectify

EU Regulating InfoSec: How Detectify helps achieving NIS 2 and DORA compliance

Jun 3, 2025 By Cecilia Wik In Detectify
Navigating the complex and ever-changing compliance landscape is difficult for many companies and organizations. With many regulations, selecting the appropriate security tooling that aligns with the compliance needs of your business becomes a significant challenge.
Read Post
How NIS2 Is Forcing Companies to Rethink Their Security Architecture

How NIS2 Is Forcing Companies to Rethink Their Security Architecture

May 29, 2025 By SecuritySenses In SecuritySenses
The NIS2 Directive is raising the bar for cybersecurity compliance across the EU, pushing companies to reevaluate and strengthen their entire security architecture. With stricter requirements, broader sector coverage, and hefty penalties for non-compliance, many organizations are feeling unprepared for the level of transparency and resilience now expected. This shift is creating urgent challenges-especially for businesses with fragmented systems, limited incident response plans, or outdated infrastructure.
Read Post
archTIS

Understanding the U.S. Cloud Act: Impact on Compliance, Agreement, and Data Protection

May 28, 2025 By Irena Mroz In archTIS
The complex nature of the U.S. CLOUD Act (CLOUD Act) presents far-reaching implications for global data governance. In this article, we explore how this pivotal legislation is reshaping compliance requirements, transforming privacy frameworks and challenging traditional concepts of data sovereignty, as well as strategies and technologies to ensure compliance.
Read Post
tripwire

What the UK's New Cyber Resilience Bill Means for Businesses-and How to Stay Ahead

May 26, 2025 By Katrina Thompson In Tripwire
The UK is facing the same evolving digital challenges as the rest of the world, and its new Cyber Security and Resilience Bill is designed to not only help it catch up - but stay ahead. Attackers change their tactics all the time. Without an agile, living framework that gives lawmakers some breathing room, adversaries could easily outstrip the clunky government processes that govern cybersecurity (and often a step behind).
Read Post
Feroot

GDPR Compliance for SaaS: 2025 Action Plan

May 23, 2025 By Feroot In Feroot
The General Data Protection Regulation (GDPR) is more than a legal requirement—it’s a trust signal in today’s competitive SaaS market. As 2025 unfolds, the need to align with GDPR’s evolving demands has never been greater. This guide provides a tactical roadmap tailored to software-as-a-service companies, helping your organization maintain compliance and uphold user privacy.
Read Post
ThreatQuotient

The Value of Threat Intelligence in Ensuring DORA Compliance

May 15, 2025 By ThreatQuotient In ThreatQuotient
“Expect the unexpected” is a saying that holds particular weight in cybersecurity. In 2025, with continuing technological advancement, the divide between game-changing business opportunities and serious cyber threats has never been starker. With innovation and disruption unlikely to slow the pace any time soon, all sectors must build their operational resiliency to stay ahead and ensure stability.
Read Post
gitprotect

Don't Let Failures Break Your DORA Metrics: How Backups Safeguard DevOps Performance

May 14, 2025 By Miłosz Jesis In GitProtect
If you are a part of the DevOps community, you may have heard of DORA metrics. These were introduced to allow organizations to track and measure performance, so that they can further improve their software delivery life cycles. Over the years, the DevOps Research and Assessment (DORA) team proposed four metrics to drive the performance of SDLCs: These four key metrics shall never be disregarded. Remember – DORA metrics measure information regarding your development and operations processes.
Read Post

How to Adopt DORA's Threat-Led Penetration Testing Requirements

May 8, 2025 By Kroll In Kroll
The new Digital Operational Resilience Act (DORA) requires significant financial entities in the EU to carry out Threat-Led Penetration Testing (TLPTs) on a regular basis. However, the skills required along with the planning for these types of exercises can prove difficult and time consuming. During this session, Kroll brings together our red teaming, threat intelligence and DORA regulatory compliance experts to provide practical guidance on how security, risk and resiliency leaders can adopt a sustainable threat-led penetration testing (TLPT) program as required by DORA.
View Video
teleport

Exploring DORA Compliance in Practice: Key Takeaways from Our Recent Webinar

May 7, 2025 By Teleport In Teleport
When I speak to customers across EMEA, one thing is clear: regulations like the EU's Digital Operational Resilience Act (DORA) are becoming very real, very fast. Financial institutions and their service providers are being asked to do more than ever before to demonstrate secure operations, especially when it comes to managing access to infrastructure. That's exactly why we hosted a recent webinar in partnership with Falx. The goal?
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.