Tag feed

#compliance

634 posts14 followers

Explore Hashnode

Alternatives

Trending tags this week

ENEvangelist Navalevangelist67.hashnode.dev3d ago · 3 min read

Set up a security page alert when the SOC 2 badge disappears

Sales sent me a deck that still claimed SOC 2 Type II. I opened the vendor's public security page to grab the report request form. The badge was gone. No changelog. No email. Just a quieter trust page

0

AJAmartya Jhasecurity-research.hashnode.dev5d ago · 14 min read

SOC 2 Penetration Testing: What Auditors Actually Check For (And Where Most Programs Fail)

Day three of a SOC 2 Type II audit. The auditor pulls up the penetration testing section of the audit program and asks: "Can you show me evidence that exploitable vulnerabilities identified during you

0

IAIAAP Auditiaapaudit.hashnode.dev5d ago · 3 min read

Accessibility Audit Evidence

Accessibility audits become useful when findings can be reproduced and fixed. A report that only lists failures may satisfy a surface-level checkbox, but it does not give teams enough information to r

0

4F404 Founders404-founders.comSep 3 · 9 min read

CRA Article 14 Reporting Starts September 11: What Manufacturers Need Ready

CRA Article 14 Reporting Starts September 11: What Manufacturers Need Ready On 11 September 2026, the Cyber Resilience Act's mandatory reporting obligations under Article 14 start applying. The obliga

0

JGJoe Gellatlymedcurity.hashnode.devAug 31 · 4 min read

If You're a Healthcare Vendor, a Signed BAA Is the Start of Your HIPAA Job, Not the End

If your company handles protected health information for healthcare clients, you are a business associate, and your clients are starting to ask a harder question than "will you sign a BAA?" They want

0

SCSherdil Cloudsherdil-cloud.hashnode.devAug 31 · 6 min read

The 2 Root Causes Behind Almost Every Cloud Breach in 2026

TL;DR: Attackers almost never break the cloud itself, they exploit how it's configured and who can access it. Misconfiguration and stolen identity cause the overwhelming majority of 2026 cloud breache

0

SGShriganesh Gupta0xshriganeshgupta.hashnode.devAug 30 · 5 min read

The Compliance Trap: Why Developers Need to Stop Hoarding User PII

When you're building a project for a weekend hackathon, speed is everything. You spin up a quick database, wire up an authentication or KYC provider, and save every single field they throw back at you

0

VNVinit Nairvinitnair.hashnode.devAug 28 · 30 min read

Blocking AI in Power Platform: What Actually Works

I applied every supported control Microsoft documents for turning AI off in a Power Platform environment. Twelve tenant switches. Eight environment settings. The organisation setting whose name is lit

0

JGJoe Gellatlymedcurity.hashnode.devAug 27 · 4 min read

The Business Associate Inventory Nobody Keeps

Ask a healthcare organization for its list of business associates and you will usually get one of two answers. A folder of signed PDFs, or a spreadsheet somebody built two years ago and stopped updati

0

ETEcosmob Technologyecosmobvoipexpert.hashnode.devAug 26 · 4 min read

Building AI Voice Agent Disclosure Directly Into Your SIP Call Flows

If your AI voice agent is realistic enough that callers can't tell it's synthetic, you've solved the hard product problem. You've also walked into a regulatory one — and for engineering teams, that re

0

#compliance

Search Hashnode

#compliance

Explore Hashnode

Trending tags this week

Set up a security page alert when the SOC 2 badge disappears

SOC 2 Penetration Testing: What Auditors Actually Check For (And Where Most Programs Fail)

Accessibility Audit Evidence

CRA Article 14 Reporting Starts September 11: What Manufacturers Need Ready

If You're a Healthcare Vendor, a Signed BAA Is the Start of Your HIPAA Job, Not the End

The 2 Root Causes Behind Almost Every Cloud Breach in 2026

The Compliance Trap: Why Developers Need to Stop Hoarding User PII

Blocking AI in Power Platform: What Actually Works

The Business Associate Inventory Nobody Keeps

Building AI Voice Agent Disclosure Directly Into Your SIP Call Flows