GRC stories - Page 12

Poor-quality customer data has driven more than two-thirds of FCA AML fines since 2020, analysis finds, with penalties topping GBP £430m.

Arcus Compliance founder Lee Bryan's new book urges start-ups to treat regulation as a strategic growth engine, not a drag on innovation.

The UK's Cyber Security and Resilience Bill puts GRC at the core of business, demanding real-time oversight, resilience and accountability.

Pluralsight has hired veteran product leader Michael Ross as Chief Product Officer to steer innovation in its tech skills platform.

Smart Communications appoints Heidi Johnson as chief product and technology officer to spearhead its next phase of AI-led innovation.

AI-driven hacking has pushed weekly cyber attacks up 70% since 2023, with Check Point warning campaigns are faster, broader and harder to stop.

ThetaRay launches Ray AI suite to automate AML investigations, promising audit-ready case files and up to 70% less manual work.

AI deepfakes are eroding faith in biometrics and executive identities, forcing companies to rebuild trust in how they verify people and payments.

Staff are quietly turning to unsanctioned AI tools, trading security and data privacy for speed, as new research warns of rising leakage risks.

Teleport launches an agentic AI identity framework to secure autonomous agents with zero trust credentials across cloud and on-prem systems.

Tenable launches Tenable One AI Exposure to map, govern and cut AI-driven cyber risk across cloud, SaaS and on-premises systems.

AI-driven cloud adoption is forcing firms to swap static privacy checklists for continuous, real-time defence of sensitive data flows.

Fortinet has upgraded FortiCNAPP with network, data and runtime signals to sharpen cloud risk scoring and cut alert overload for security teams.

Revizto names new revenue and product chiefs and launches a global CIO advisory network of 75+ leaders to steer its expansion strategy.

Genetec issues privacy rules for physical security data, urging clear limits, encryption and ongoing cyber defence for surveillance systems.

New UK cyber bill pushes critical sectors towards continuous offensive security testing as state-backed and criminal threats intensify.

CrowdStrike secures ISO 42001 AI governance certification for its Falcon platform, signalling audited, matured controls over its security AI.

NCC Group and Delinea launch managed privileged access service, targeting AI-era identity threats with Zero Trust, cloud-native controls.

Radware launches cloud-based API Security Service unifying discovery, posture management and runtime defence to counter evolving API threats.

Experts say AI-driven attacks and rampant data leaks mean organisations must verify outputs, curb collection and harden identity controls.