By Editor , 28 October 2026
DORA and NIS2 Flow-Down Pulls Non-EU Vendors Into Scope

Germany – October 27, 2026 -- Vendors selling to EU banks, hospitals or energy providers are being pulled into DORA and NIS2 obligations through contractual flow-down, regardless of where they are headquartered, according to Sergiy Lapin, CEO of Passeca Germany.

By Editor , 28 October 2026
CMMC Pause Raises False Claims Act Risk for Defense Contractors

United States – October 27, 2026 -- The Pentagon's suspension of CMMC Phase II third-party assessment requirements has made contractors' own self-attestations the main compliance record, raising their exposure under the False Claims Act (FCA). Mandatory C3PAO certifications remain on hold following the Department of War's class deviation, but Phase I self-attestation is still fully active.

By Editor , 28 October 2026
Hyperproof Pitches Hands-On or Guided GRC Implementation

Global – October 27, 2026 -- Hyperproof is selling professional services across six areas to close the gap between buying governance, risk and compliance (GRC) software and getting teams to use it, and cites a G2 recognition for Fastest Implementation.

Customers choose between two implementation models

Under Hands-on Implementation, Hyperproof builds the platform from customer inputs and approvals. Under Guided Implementation, the customer builds and Hyperproof advises. The company says its team anticipates edge cases and designs scalable integrations.

By Editor , 28 October 2026
Hyperproof Pitches 'Build on Top' GRC Model Over In-House AI Tools

Global – October 27, 2026 -- Hyperproof says compliance teams can reach readiness in weeks on an extensible GRC platform, versus 6 to 12 months spent engineering custom AI agent pipelines in-house.

The vendor frames the choice facing CISOs and compliance leaders as "build from scratch" versus "build on top." Risk teams are increasingly assembling internal utilities with Claude, ChatGPT or custom LLMs.

By Editor , 28 October 2026
Four AI Mistakes Put GRC Programs at Audit Risk

Global – October 27, 2026 -- Enterprises that pair AI speed with documented human accountability are gaining a competitive edge in governance, risk and compliance (GRC), while four common deployment mistakes expose others to audit failures, according to a commentary originally published in Business Reporter and promoted by GRC vendor Hyperproof.

By Editor , 28 October 2026
Carahsoft Becomes Hyperproof's Government Aggregator for GRC

United States – October 27, 2026 -- Hyperproof has named Carahsoft Technology Corp. its Master Government Aggregator, making its governance, risk and compliance (GRC) platform available to public sector organizations, defense industrial base (DIB) suppliers and government contractors through six procurement contract vehicles.

By Editor , 28 October 2026
Hyperproof, GRC 20/20 Host Nov. 17 Webinar on TPRM Business Exposure

North America – October 27, 2026 -- Hyperproof and GRC 20/20 Research will host a webinar on November 17 at 12 PM ET / 9 AM PT arguing that third-party risk management (TPRM) programs should be measured by the risk they reduce, not by how many vendor assessments they complete.

By Editor , 28 October 2026
Hyperproof, Platview Host Session on Africa AI, Data Compliance

Africa – October 27, 2026 -- Hyperproof and Platview are offering an on-demand session on how tightening data-security and AI regulation affects organisations operating in and with Africa.

EU rules reach beyond Europe as African regulators build their own frameworks

New EU rules on data security and AI apply well beyond Europe's borders, according to the organisers. African regulators are building their own frameworks at pace, adding a second layer of obligations for companies active on the continent.