#Regulation

10 reports tagged "Regulation".

FS-ISAC

AI Security & AI Governance

Threat Actors, Geopolitics & Intelligence

Navigating Cyber: Annual Threat Review and Predictions

The report provides an in-depth analysis of the evolving cybersecurity threat landscape facing the financial sector, including trends in fraud, ransomware, DDoS attacks, and the impact of emerging technologies like generative AI and quantum computing. It also outlines key regulatory developments and strategic recommendations for mitigating risks.

May 2025Read →

Sopra Steria

AI Security & AI Governance

Threat Actors, Geopolitics & Intelligence

State of Cyber Security 2025

In-depth analysis of the 2024 cybersecurity landscape, highlighting trends in cybercrime, regulatory developments, and emerging threats. It emphasizes the increasing sophistication of phishing attacks, the rise of Phishing-as-a-Service (PhaaS), and the evolving threat of ransomware. The report also discusses the impact of AI on cybersecurity, the importance of regulatory frameworks like NIS2 and DORA, and recommendations for improving organizational security.

Mar 2025Read →

ECSO

Cyber Risk & Resilience

Governance, Regulation & Compliance

NIS2 Implementation: Challenges & Priorities

The ECSO White Paper highlights the fragmented implementation of NIS2 across the EU, emphasizing challenges for SMEs, multinational companies, and sectors with low cybersecurity maturity. It calls for harmonization and standardized approaches to improve compliance and security.

Jan 2025Read →

Cloud Security Alliance

Cloud Security

SOC, Detection & Response

Understanding Data Security Risk

This 2025 Cloud Security Alliance survey (sponsored by Thales) exposes critical gaps in how organizations understand and manage data security risk across hybrid and multi-cloud environments. Key findings: 31% of organizations lack tools to identify their riskiest data sources, 80% lack confidence identifying high-risk data, over half use four or more tools to manage data risks (creating inefficiencies and conflicting information), and only 15% perform real-time risk evaluations. Compliance (ISO, GDPR, PCI DSS) remains the primary driver for risk reduction but leaves gaps against emerging threats. The report highlights misalignment between management's strategic goals and staff's operational realities, and recommends unified platforms, proactive risk-based approaches, staff training, process streamlining, and tool consolidation.

Jan 2025Read →

CyberArk

AI Security & AI Governance

Threat Actors, Geopolitics & Intelligence

2025 Identity Security Landscape

CyberArk's 2025 Identity Security Landscape (a Security Matters research report) maps how AI adoption and the explosion of machine identities are reshaping identity risk. Nine in ten organizations reported a successful identity-centric breach, over half (51%) fell victim to phishing/vishing multiple times, and machine identities now outnumber human identities by more than 80 to 1 — yet only 12% treat machine identities as privileged. 72% of employees use AI tools at work while 68% of organizations still lack identity security controls for them, fuelling shadow-AI risk. The report frames AI as a "triple threat" (weapon, defender, and system to secure), warns that traditional IAM cannot govern autonomous AI agents, and recommends privileged access management, least privilege, session monitoring, tool consolidation, and governance aligned with tightening regulation (e.g., Australia's Cyber Security Act 2024).

Jan 2025Read →