Tag: governance
-
Organizations Struggle to Detect, Contain OutScope AI Agents
Enterprises are confident in AI agent security, but weak least-privilege controls and slow detection reveal a growing governance gap. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/organizations-struggle-to-detect-contain-out-of-scope-ai-agents/
-
Datenresidenz und Datensouveränität im Zeitalter der KI
Datenresidenz allein reicht im KI-Zeitalter nicht mehr aus. Wer Souveränität ernst nimmt, muss Speicherort, Rechtszuständigkeit, operative Kontrolle, Verschlüsselung, Provider-Abhängigkeiten und Governance-End-to-End zusammendenken. Für IT-Entscheider wird Datensouveränität damit von einer Compliance-Frage zur strategischen Architekturentscheidung. Management Summary Datenresidenz ist nicht Datensouveränität: Der Standort eines Rechenzentrums beantwortet nicht die entscheidende Frage, wer rechtlich, technisch und operativ Zugriff auf……
-
NASCIO urges Congress to reauthorize grant program and address AI governance
First seen on scworld.com Jump to article: www.scworld.com/brief/nascio-urges-congress-to-reauthorize-key-grant-program-and-address-ai-governance
-
Liquibase Brings Database Change Governance to Germany’s Most Regulated Enterprises
Germany’s enterprise IT organizations, from DAX-listed manufacturers to highly regulated banks, insurers, and pharmaceutical companies, are under the same pressure driving digital transformation everywhere: deliver software and AI-powered products faster, without sacrificing the compliance and audit standards regulators demand. Application… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/liquibase-brings-database-change-governance-to-germanys-most-regulated-enterprises/
-
Gold für Coreview Tenant-Resilience for Microsoft-365″¯mit dem German-Stevie-Award-2026 ausgezeichnet
Coreview hat für seine Security-Lösung <> bei den bei den diesjährigen German-Stevie-Awards den goldenen Stevie-Award in der Kategorie ‘Business Technology Solution Identitäts- und Zugriffssicherheitslösung” gewonnen. Für die Fachjury bietet Coreview eine ‘ausgereifte Lösung, die der zunehmenden Komplexität moderner Cloud-Umgebungen wirksam begegnet und gleichzeitig die Governance und Ausfallsicherheit verbessert.” Coreview ist […] First seen on netzpalaver.de…
-
KI und Compliance – Kiteworks-Report: Sicherheit top, KI-Governance flop?
First seen on security-insider.de Jump to article: www.security-insider.de/kiteworks-report-sicherheit-top-ki-governance-flop-a-8f143aa6fa4d6699f00911b21d2fe72c/
-
AISI Deutschland: KI-Institut soll Gefahren von KI-Modellen bewerten
Die Bundesregierung sieht in KI-Systemen auch Gefahren für die nationale Sicherheit. BSI und Bundesnetzagentur sollen nun KI-Modelle bewerten. First seen on golem.de Jump to article: www.golem.de/news/aisi-deutschland-ki-institut-soll-gefahren-von-ki-modellen-bewerten-2609-212488.html
-
Why Enterprises Need AI FinOps, Security to Scale Responsibly
Enterprises Need Unified Cost and Security Controls to Scale AI Agents Responsibly AI agents can run up costs and expand security risks faster than traditional governance can respond. Companies need real-time visibility into every model call, tool invocation and agent action, linking spending, access and outcomes so finance and security teams can control AI jointly…
-
Broadcom Unveils VMware AI Factory With Secure Sandboxes for Enterprise AI Workloads
Broadcom has announced the VMware AI Factory, a software-defined private AI platform designed to accelerate the transition from bare-metal servers to production-ready AI models. This platform enhances governance, infrastructure automation, and workload isolation. Unveiled during VMware Explore 2026, the VMware AI Factory serves as the foundation for VMware’s Private AI Cloud. It combines VMware Cloud…
-
GRC Teams Scale AI Governance: Insights from the 2026 IT Risk and Compliance Benchmark
Hyperproof’s 2026 IT Risk and Compliance Benchmark Report reveals that while 97% of GRC teams leverage AI for internal productivity, only 27% have operationalized AI for external assurance. To bridge this gap, modern compliance leaders are anchoring programs in frameworks… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/grc-teams-scale-ai-governance-insights-from-the-2026-it-risk-and-compliance-benchmark/
-
Agents Without Guardrails: Why Agentic AI Governance Must Focus on Behavior, Not Just Identity
Enterprises have spent decades building security around a familiar question:”¯Who are you? Identity and access management (IAM), authentication, service accounts, OAuth tokens, and role-based access controls all start there. Establish identity, assign permissions, and control access. Agentic AI changes the equation. AI agents do not simply access systems. They reason, select tools, call APIs, retrieve……
-
8 Causes of Enterprise Compliance Software Failure
<div cla Large enterprise compliance programs collapse more often than most governance teams realize. Software that promised automation ends up sitting idle while teams return to spreadsheets. The issue rarely comes down to bad technology. Instead, it comes down to how that technology gets implemented, adopted, and aligned with operational reality. First seen on securityboulevard.com…
-
Securing Claude Code: The New Compliance API, Local Visibility, and Identity Governance
Claude Code reads files, runs shell commands, invokes MCP tools, and acts through the credentials available on a developer’s machine. Anthropic’s new Compliance API endpoints give security teams their clearest view yet into that activity. They also expose a larger problem: activity logs alone cannot tell you whether an agent’s access is legitimate.AI has moved…
-
Der T-Rex-Moment der KI: Wenn Sicherheitszäune plötzlich nicht mehr reichen
Frontier AI verändert die Cyber-Bedrohungslage. Unternehmen müssen mit Zero Trust, Segmentierung, KI-Governance und defensiver KI ihre Resilienz stärken. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/der-t-rex-moment-der-ki-wenn-sicherheitszaeune-ploetzlich-nicht-mehr-reichen/a46289/
-
AI Governance Has a Control Problem, Not a Policy Problem
Tags: access, ai, business, control, credentials, cybersecurity, data, finance, governance, identity, least-privilege, risk, technology, toolWe’re getting good at writing policies about how AI should be used. Responsible AI principles. Acceptable-use policies. AI risk frameworks. Approval processes. Governance committees. All of these have a place. But there is a harder question that I think organisations need to start asking: What evidence proves those controls actually work? Because AI is changing…
-
Schatten-KI: Warum KI-Governance nicht bei der Freigabe einer Anwendung enden darf
Shadow AI entsteht längst nicht nur durch unerlaubte KI-Tools. Auch freigegebene Anwendungen können durch Kontowechsel, Agenten und neue Datenpfade zum Risiko werden. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/schatten-ki-warum-ki-governance-nicht-bei-der-freigabe-einer-anwendung-enden-darf/a46282/
-
AccuKnox Launches AgentZ to Help Enterprises Build, Run, and Govern AI Agents at Scale
Menlo Park, California, USA, August 27th, 2026, CyberNewswire AccuKnox today announced the launch of AgentZ, a platform for building, running, and governing AI agents across teams and workflows. AgentZ brings the agent, its execution environment, tools, workflows, permissions, and governance into a single platform, so organizations can move agents from experiment to production without assembling…
-
AccuKnox Launches AgentZ to Help Enterprises Build, Run, and Govern AI Agents at Scale
Menlo Park, California, USA, August 27th, 2026, CyberNewswire AccuKnox today announced the launch of AgentZ, a platform for building, running, and governing AI agents across teams and workflows. AgentZ brings the agent, its execution environment, tools, workflows, permissions, and governance into a single platform, so organizations can move agents from experiment to production without assembling…
-
KI-Governance auf mobilen Endgeräten: Die alten Regeln gelten nicht mehr
KI-Funktionen wandern zunehmend vom Chatfenster in Apps, Agenten und mobile Endgeräte. Für Unternehmen bedeutet das: Klassische KI-Governance greift zu kurz, wenn sie mobile Nutzung, App-Updates, Netzwerkwechsel und rollenbasierte Risiken nicht gezielt berücksichtigt. Management Summary Klassische KI-Governance reicht für mobile Endgeräte nicht mehr aus: KI steckt heute zunehmend in nativen Apps, Updates und Agenten statt nur……
-
AI will not fix a governance problem in your camera estate
Camera systems often outlive the companies that install them. In this Help Net Security interview, Rob Janssens, EMEA Cyber Security Director at Hikvision Europe, discusses … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/27/rob-janssens-hikvision-europe-surveillance-camera-security/
-
Your Coding Assistant Is Shipping Security Vulnerabilities
Tags: access, ai, api, application-security, authentication, compliance, credentials, email, endpoint, framework, github, governance, LLM, programming, risk, service, tool, vulnerabilityYour Coding Assistant Is Shipping Security Vulnerabilities. Here’s How to Fix That. AI coding assistants have gotten remarkably good at writing functional code. Syntax correctness rates are approaching 100%. Developers are more productive than ever. And yet the security picture tells a very different story. Veracode recently evaluated over 150 large language models across vendors…
-
Agentische KI in Unternehmen: Wie Governance und EU AI Act kontrollierte Autonomie ermöglichen
Agentische KI verspricht deutschen Unternehmen den nächsten Produktivitätsschub stellt aber klassische Governance-Modelle vor neue Belastungsproben. Wer autonome Systeme in Geschäftsprozesse integriert, muss Kontrolle, Nachvollziehbarkeit und regulatorische Anforderungen technisch verankern, statt sie nur organisatorisch zu beschreiben. Management Summary KI ist in deutschen Unternehmen angekommen; agentische KI steht jedoch erst am Anfang der breiten Skalierung. Der… First…
-
NIS2, BCM und Audit: Warum viele Projekte feststecken Endlich in die Umsetzung kommen
Strukturen, Anforderungen und Tools sind vielerorts vorhanden dennoch stockt die operative Umsetzung. Es sind zumeist organisatorische Hürden die NIS2-, ISMS- und BCM-Initiativen ausbremsen. Unternehmen können mit klarer Governance, verbindlichen Verantwortlichkeiten und kontinuierlicher Steuerung echte Resilienz schaffen. First seen on ap-verlag.de Jump to article: ap-verlag.de/nis2-bcm-und-audit-warum-viele-projekte-feststecken-endlich-in-die-umsetzung-kommen/107035/
-
Why Provision 29 is raising the bar for board accountability
By Tim Williams, CEO at Quod Orbis Under the 2024 UK Corporate Governance Code, the revised Provision 29 requires boards to demonstrate that their material internal controls are working effectively. Every business has hundreds of controls, however material controls have the potential to create an immense operational, security or regulatory impact. The message behind this…
-
Most Organizations Declare Victory Over a Breach Too Early
Why Bringing Systems Back Online Is Not the Same as Breach Recovery Getting systems back online may end the outage, but it doesn’t end the breach. Organizations that equate service restoration with recovery risk leaving attackers’ footholds, persistence mechanisms and governance failures untouched – and vulnerable to compromise again. First seen on govinfosecurity.com Jump to…
-
App-Governance für Vibe Coding – Island Technology: Enterprise-Kontrollen für Vibe-codierte Apps
First seen on security-insider.de Jump to article: www.security-insider.de/island-technology-enterprise-kontrollen-fuer-vibe-codierte-apps-a-c2c161c865cefb8e67413a0207c44a97/
-
KI-Agenten absichern: Warum Identity zum Erfolgsfaktor wird KI braucht Identity Governance
KI-Agenten versprechen Unternehmen mehr Tempo und Automatisierung, schaffen aber zugleich neue Sicherheitsrisiken. Entscheidend ist deshalb, nicht nur ihre Funktionen, sondern vor allem ihre Identitäten, Berechtigungen und Zugriffe konsequent zu steuern. Wer Identity Governance früh verankert, kann Innovation ermöglichen, ohne Kontrolle und Compliance aus der Hand zu geben. First seen on ap-verlag.de Jump to article: ap-verlag.de/ki-agenten-absichern-warum-identity-zum-erfolgsfaktor-wird-ki-braucht-identity-governance/107027/
-
NIST CSF 2.0 Governance: Map Controls with Expert Assessments
Tags: compliance, control, csf, cybersecurity, framework, governance, lazarus, nist, risk, risk-managementIn 2026, organizations face mounting pressure to align strategic oversight with technical controls under the NIST Cybersecurity Framework 2.0. Governance emerges as the critical function that transforms scattered compliance activities into cohesive risk management programs. Lazarus Alliance has developed proprietary mapping methodologies that connect CSF 2.0 governance outcomes directly to controls in NIST SP 800-53,”¦…
-
AI Agent Governance vs. AI Agent Speed: Do You Have to Choose?
Short answer: no. But most organizations are acting like the answer is yes, and it’s costing them. Here’s the pattern playing out inside enterprises right…Read More First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2026/08/ai-agent-governance-vs-ai-agent-speed-do-you-have-to-choose/